--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"}
{"level":"error","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f"}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"}
{"level":"info","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"}
{"level":"error","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"error","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}
{"level":"debug","ts":"2026-07-06T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"}
{"level":"error","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41526","PortSpecifier":{"PortValue":41526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fad7e140-f8c1-4e31-a47c-767acbce3139","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41526","PortSpecifier":{"PortValue":41526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368564,"nanos":816261673},"http":{"id":"fad7e140-f8c1-4e31-a47c-767acbce3139","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fad7e140-f8c1-4e31-a47c-767acbce3139","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57890","PortSpecifier":{"PortValue":57890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"385582b4-3e49-4777-8757-0c7e34b00bae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57890","PortSpecifier":{"PortValue":57890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368564,"nanos":878960716},"http":{"id":"385582b4-3e49-4777-8757-0c7e34b00bae","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385582b4-3e49-4777-8757-0c7e34b00bae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","method":"GET","path":"/maas-api/v1/api-keys/7ed8bdd3-a192-4e56-881d-5a2bc2cd6880","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368564,"nanos":967787277},"http":{"id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","method":"GET","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ed8bdd3-a192-4e56-881d-5a2bc2cd6880",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ed8bdd3-a192-4e56-881d-5a2bc2cd6880",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b36a57a6-b6f9-43d6-949e-e7627fa136c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57902","PortSpecifier":{"PortValue":57902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be2c3a12-7293-461e-9043-e5a619b33dc6","method":"GET","path":"/maas-api/v1/api-keys/c982ac91-9e10-46f9-a052-adb8324e634e","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57902","PortSpecifier":{"PortValue":57902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368565,"nanos":5086008},"http":{"id":"be2c3a12-7293-461e-9043-e5a619b33dc6","method":"GET","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c982ac91-9e10-46f9-a052-adb8324e634e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c982ac91-9e10-46f9-a052-adb8324e634e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be2c3a12-7293-461e-9043-e5a619b33dc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47784","PortSpecifier":{"PortValue":47784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47784","PortSpecifier":{"PortValue":47784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368580,"nanos":93487636},"http":{"id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337cd817-ca1d-4fcb-807a-07a84b76ec2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48832","PortSpecifier":{"PortValue":48832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48832","PortSpecifier":{"PortValue":48832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368580,"nanos":129113085},"http":{"id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de194fb-c4bc-4508-8676-fffbf9b214f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47794","PortSpecifier":{"PortValue":47794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47794","PortSpecifier":{"PortValue":47794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368580,"nanos":168990675},"http":{"id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","method":"GET","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b01a5ILrzJk7623k_KLoX6RnXemk4pVeFRClk8tJ1Cdl1BJBLnVOByNibSdy"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b01a5ILrzJk7623k_KLoX6RnXemk4pVeFRClk8tJ1Cdl1BJBLnVOByNibSdy\"}"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d882d6fa-7227-4388-bac5-833ea4da50ec","keyName":"e2e-auth-iso-a-3263bd","subscription":"e2e-auth-iso-184882","tenant":"e2e-shared-a-ad5c84","userId":"d882d6fa-7227-4388-bac5-833ea4da50ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-184882"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a663ad07-8998-4c33-bfd2-dcff8f5d969a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35380","PortSpecifier":{"PortValue":35380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c701e50b-42a7-4223-b580-697f8b6c9426","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35380","PortSpecifier":{"PortValue":35380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368597,"nanos":303569399},"http":{"id":"c701e50b-42a7-4223-b580-697f8b6c9426","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701e50b-42a7-4223-b580-697f8b6c9426","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41578","PortSpecifier":{"PortValue":41578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f9de070-4cf1-4273-80ed-5409db15884a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41578","PortSpecifier":{"PortValue":41578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368597,"nanos":340023438},"http":{"id":"5f9de070-4cf1-4273-80ed-5409db15884a","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f9de070-4cf1-4273-80ed-5409db15884a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368597,"nanos":381610598},"http":{"id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","method":"GET","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMHwSDhWPiNodP4_gP1UYE0DWVanbxOtAsG8l0qIVW9S2WvnpTuR9P3Mr6W"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMHwSDhWPiNodP4_gP1UYE0DWVanbxOtAsG8l0qIVW9S2WvnpTuR9P3Mr6W\"}"}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50ec20b9-f25f-4236-bcdc-35a62a8597c8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41022","PortSpecifier":{"PortValue":41022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41022","PortSpecifier":{"PortValue":41022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368612,"nanos":433374566},"http":{"id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fffed5e-0ad5-40fa-a215-7df13c6af18b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54710","PortSpecifier":{"PortValue":54710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54710","PortSpecifier":{"PortValue":54710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368612,"nanos":475104936},"http":{"id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afde1c2d-590f-46c8-88b1-979bab1b75b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41036","PortSpecifier":{"PortValue":41036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41036","PortSpecifier":{"PortValue":41036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368612,"nanos":518777703},"http":{"id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7c9c3a-92b4-454f-b9f8-48eab272caf4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7022b112-33e4-480f-b8f1-814163e7750d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54726","PortSpecifier":{"PortValue":54726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7022b112-33e4-480f-b8f1-814163e7750d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7022b112-33e4-480f-b8f1-814163e7750d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54726","PortSpecifier":{"PortValue":54726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368612,"nanos":559247463},"http":{"id":"7022b112-33e4-480f-b8f1-814163e7750d","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7022b112-33e4-480f-b8f1-814163e7750d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7022b112-33e4-480f-b8f1-814163e7750d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7022b112-33e4-480f-b8f1-814163e7750d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7022b112-33e4-480f-b8f1-814163e7750d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7022b112-33e4-480f-b8f1-814163e7750d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368629,"nanos":747485288},"http":{"id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28aa8c8d-f1f5-4b47-b2d8-195f5ddb2a2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52828","PortSpecifier":{"PortValue":52828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52828","PortSpecifier":{"PortValue":52828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368629,"nanos":789194023},"http":{"id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eb19fa9-78e1-460c-9db0-44f609eb6b07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52834","PortSpecifier":{"PortValue":52834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","method":"GET","path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52834","PortSpecifier":{"PortValue":52834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368629,"nanos":831717098},"http":{"id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","method":"GET","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd931aaf-6c09-4c7d-bffc-e683e8d25d77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54656","PortSpecifier":{"PortValue":54656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","method":"GET","path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54656","PortSpecifier":{"PortValue":54656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368629,"nanos":871701696},"http":{"id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","method":"GET","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c78ea04-dfaa-4e8e-9640-8d0d55234e4c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae396e15-33e2-4882-ac0a-915185d9d7c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46012","PortSpecifier":{"PortValue":46012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46012","PortSpecifier":{"PortValue":46012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368647,"nanos":97196820},"http":{"id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6d7c4c-5c3f-427c-897c-55c8c8d0676a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54804","PortSpecifier":{"PortValue":54804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54804","PortSpecifier":{"PortValue":54804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368647,"nanos":132995547},"http":{"id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/auth-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4fbf01-19dc-41cb-b78a-2f995cd51453","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19fceebd-a263-485d-b750-0b4f04f57653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46022","PortSpecifier":{"PortValue":46022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19fceebd-a263-485d-b750-0b4f04f57653","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19fceebd-a263-485d-b750-0b4f04f57653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46022","PortSpecifier":{"PortValue":46022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368647,"nanos":170685335},"http":{"id":"19fceebd-a263-485d-b750-0b4f04f57653","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xWtO2jgRVwUlof2s_E7yRKpIAiw7DCPLVHG3L9EsDLwFHm8XlcbRXuCjQH6v"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xWtO2jgRVwUlof2s_E7yRKpIAiw7DCPLVHG3L9EsDLwFHm8XlcbRXuCjQH6v\"}"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98f1bd71-f0ca-4f2a-8243-54c611b636ab","keyName":"e2e-auth-iso-a-6b4c85","subscription":"e2e-auth-iso-c00326","tenant":"e2e-shared-a-ad5c84","userId":"98f1bd71-f0ca-4f2a-8243-54c611b636ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19fceebd-a263-485d-b750-0b4f04f57653","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/auth-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c00326"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19fceebd-a263-485d-b750-0b4f04f57653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19fceebd-a263-485d-b750-0b4f04f57653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19fceebd-a263-485d-b750-0b4f04f57653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a40b6da732ad737375c652d73cd923d23a6f6d972712879e64a1cbe64adf08e"}
{"level":"info","ts":"2026-07-06T20:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae9281f32b943a8f2259d68415ced7285aada536fd43d88af7cc5d3a9414218"}
{"level":"info","ts":"2026-07-06T20:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae6c46bb864bbd2d0e172df9b5111fbb5982cc85c279913386d554a5890a021"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab668382bb938a1925e5704a1369f7994b98a3c7374a72868463d3ed2028e977"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eae539c2a14831df5eb0eb286edb8e60fddb4cf7cc7cd1d9a4b0e47f60e0129e"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45727da930b50b5fee40514ef4664ce928932942a591078bc53795745b494e2"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2a2cc0a5e65b9e3b1a81ab00f02fc807d3da350798088fd584708fe879ad1e1"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c108d5a47980fef7e5795a543076d1087d41c3dfc44ecbee72cf9cde77a7202"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7021a70a31055b8f534ff442b87e664f2f377712e93ef4ba2ae86d004247b83c"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1b9fbc8e623dd7eecb959a2aace07f7cd7daf19121acacb4645adfb4927582e"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4df6d017361c0372436f1fb22f6359bf8d6608f3fac18ff5293056c3930050e1"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62be12dec88bb135000e6ab94fda33450ff0ffb76f9cdb63e3ce04f05f4fda5f"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e68fb3c2d6136a1320584e83e0f65cef6ad3062ff88bcf553371f4063b79886"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12d1b4e5ebdb60998d2f80e23f506b271b7a23ed59de099f8f4bf7f76a51b431"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bf1501d9648c2108dc9bc10931c51b309b6e84d8be6dae2edf56cf19ed6cda4"}
{"level":"info","ts":"2026-07-06T20:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b5b819e97db9daf88d2772d135bddf3c57acdfcc3ed4de3f47fd459c7ab215f"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"error","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"error","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"error","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"error","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"error","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"}
{"level":"debug","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368703,"nanos":112510852},"http":{"id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/sub-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e6ec59-ae6f-4832-aa9a-4d65c1df66fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36af881e-bf41-448d-89d3-7be545112d2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38300","PortSpecifier":{"PortValue":38300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36af881e-bf41-448d-89d3-7be545112d2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36af881e-bf41-448d-89d3-7be545112d2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38300","PortSpecifier":{"PortValue":38300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368703,"nanos":158607880},"http":{"id":"36af881e-bf41-448d-89d3-7be545112d2f","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36af881e-bf41-448d-89d3-7be545112d2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36af881e-bf41-448d-89d3-7be545112d2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/sub-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36af881e-bf41-448d-89d3-7be545112d2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36af881e-bf41-448d-89d3-7be545112d2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36af881e-bf41-448d-89d3-7be545112d2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368703,"nanos":204052819},"http":{"id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","method":"GET","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xZ3dporFnk2aJZK_5UbtFRExl8Qwmoc0n0IHJO7R7wbZKTcNqyPVFmaKyt1"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xZ3dporFnk2aJZK_5UbtFRExl8Qwmoc0n0IHJO7R7wbZKTcNqyPVFmaKyt1\"}"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eb175c53-6b3f-469d-af0d-2c4f5a5f9339","keyName":"e2e-sub-iso-f3acd5","subscription":"e2e-a-only-7e5cc0","tenant":"e2e-shared-a-ad5c84","userId":"eb175c53-6b3f-469d-af0d-2c4f5a5f9339","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/sub-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7e5cc0"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bbc4bb-4850-4be2-8904-e783a40a059c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38308","PortSpecifier":{"PortValue":38308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38308","PortSpecifier":{"PortValue":38308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368703,"nanos":234683154},"http":{"id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","method":"GET","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m8dpmfoKP1YaTaoH_wln79ve3IWxwScV1qqiZ6tlzoQqJ9O0Z5fptW630SVN"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-m8dpmfoKP1YaTaoH_wln79ve3IWxwScV1qqiZ6tlzoQqJ9O0Z5fptW630SVN\"}"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b39f3fa-cbab-4a4a-ab7d-3eb97a4b694a","keyName":"e2e-sub-iso-226a27","subscription":"e2e-b-only-7e5cc0","tenant":"e2e-shared-b-d1d0db","userId":"6b39f3fa-cbab-4a4a-ab7d-3eb97a4b694a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/sub-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7e5cc0"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9157b2d4-d2e0-4c1f-b636-079fcde9da0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe8d441-3518-4223-9154-89b136ceee67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53598","PortSpecifier":{"PortValue":53598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fe8d441-3518-4223-9154-89b136ceee67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe8d441-3518-4223-9154-89b136ceee67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53598","PortSpecifier":{"PortValue":53598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368720,"nanos":874477609},"http":{"id":"0fe8d441-3518-4223-9154-89b136ceee67","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fe8d441-3518-4223-9154-89b136ceee67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fe8d441-3518-4223-9154-89b136ceee67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/sub-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe8d441-3518-4223-9154-89b136ceee67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe8d441-3518-4223-9154-89b136ceee67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe8d441-3518-4223-9154-89b136ceee67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368720,"nanos":956148680},"http":{"id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/sub-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc2a8e8-c2f5-4ebc-bb5e-8b17d6187579","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53604","PortSpecifier":{"PortValue":53604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97b61128-317f-4254-8ff1-7d3d16b572e5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53604","PortSpecifier":{"PortValue":53604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368721,"nanos":7288011},"http":{"id":"97b61128-317f-4254-8ff1-7d3d16b572e5","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UkTVCKalb0mwqDCM_CO3Pz8YerkqiowJ1ThDGPHtyOTEFZuRkqEjm6i1o4ZO"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UkTVCKalb0mwqDCM_CO3Pz8YerkqiowJ1ThDGPHtyOTEFZuRkqEjm6i1o4ZO\"}"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0c5be91-1c97-443a-80f6-eeb9829dc519","keyName":"e2e-sub-iso-8822c3","subscription":"e2e-shared-sub-137404","tenant":"e2e-shared-a-ad5c84","userId":"e0c5be91-1c97-443a-80f6-eeb9829dc519","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/sub-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-137404"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b61128-317f-4254-8ff1-7d3d16b572e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60300","PortSpecifier":{"PortValue":60300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0449e507-c66d-4899-a1a0-da5c056e0afa","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60300","PortSpecifier":{"PortValue":60300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368721,"nanos":45254221},"http":{"id":"0449e507-c66d-4899-a1a0-da5c056e0afa","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1L0nhF5Mb0IvhqeOP_WoEhAaGsDtoDzgw9eFbGXJpDpAwpMXUc0V9gzR1hNJd"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1L0nhF5Mb0IvhqeOP_WoEhAaGsDtoDzgw9eFbGXJpDpAwpMXUc0V9gzR1hNJd\"}"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0795b100-1cd4-4305-8a79-ed865191e0c8","keyName":"e2e-sub-iso-9365b5","subscription":"e2e-shared-sub-137404","tenant":"e2e-shared-b-d1d0db","userId":"0795b100-1cd4-4305-8a79-ed865191e0c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/sub-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-137404"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0449e507-c66d-4899-a1a0-da5c056e0afa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7505a36ccc8b387cec3dc37febc42a7c59faee4efbee4e0fa639aa1199f64da9"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fde2009bb6bc180b477f1f67d0dc74dbcf3d03348de54ae6ff3ba1e083192103"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13462260c89c52ce8e3fe1d09db9285926afe6b5bb63bb1bc749516671ca2324"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672fcc651bd174697b25eebe014aa5997ceec4d1beb2d7e3dc2f33f35a79b1eb"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0583348a01f3b230f343d6be4282ec100ed0d5fcd451075b4913a39d72739a9"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e67855e5a6a138e013c195b1cabe14565f24bcad83c4bd04fc37895e8219a59d"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571e392e02d7e8a572a7f45adbe290e4a7e3033a50a10782d8ca0f60f1dd6a64"}
{"level":"info","ts":"2026-07-06T20:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47973986a5b0a1ba30acbf6c04ed712bf121aea5e105536b8210d7edf18e167e"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b232102442b482d6d3d3ca393acab69b8ea8a01e9dd8e6fadd60937bd183a607"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2561ce097d7bbf411b1db9e16ad69b2504e2d9fa15fe7853cde8b903ad9633f2"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c96302fd6e40bbe4a0e3620e920c1ff4c138ed0ea1ccfa9edd3939764bcdb8f2"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eddbf569084180e3c28c755965c814a1ce119aeb8fa855a5883c733c8bc112a5"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4157be3e37d75fc611b84dbc9b3f1596d1c2a6c34249c29bdbf31b2286b4763c"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc1e33abb448a885e5b0da60cd936e60638b59d5311514dc5d60e9f3a6e14401"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/467b22b85237db2b33224720b9d8dbf977b332ac4bc8e58f129d973f0d912f29"}
{"level":"info","ts":"2026-07-06T20:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54ad83806c05907a4aea8fa177b6cb2d4634df4ddaad9001effb3537fba7a10f"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"error","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"debug","ts":"2026-07-06T20:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"error","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"}
{"level":"error","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"debug","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"debug","ts":"2026-07-06T20:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}
{"level":"debug","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"}
{"level":"debug","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"debug","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"}
{"level":"info","ts":"2026-07-06T20:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390"}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46302","PortSpecifier":{"PortValue":46302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46302","PortSpecifier":{"PortValue":46302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368780,"nanos":32953258},"http":{"id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa09b252-c21e-4efc-8b4e-5d6fd26cf5c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41740","PortSpecifier":{"PortValue":41740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81e9cdb9-380a-494b-98dc-900e999c7601","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41740","PortSpecifier":{"PortValue":41740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368780,"nanos":77626280},"http":{"id":"81e9cdb9-380a-494b-98dc-900e999c7601","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e9cdb9-380a-494b-98dc-900e999c7601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46318","PortSpecifier":{"PortValue":46318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54f48769-cbf1-4672-b920-45a06e6f8d73","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46318","PortSpecifier":{"PortValue":46318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368780,"nanos":121457423},"http":{"id":"54f48769-cbf1-4672-b920-45a06e6f8d73","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN\"}"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","subscription":"e2e-rate-iso-a-ee4097","tenant":"e2e-shared-a-ad5c84","userId":"97f8a13c-9524-4199-9533-bfa57d26ca14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-ee4097\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee4097"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","selected_subscription":"e2e-rate-iso-a-ee4097","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-ee4097@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54f48769-cbf1-4672-b920-45a06e6f8d73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46328","PortSpecifier":{"PortValue":46328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46328","PortSpecifier":{"PortValue":46328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368781,"nanos":173509377},"http":{"id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN\"}"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","subscription":"e2e-rate-iso-a-ee4097","tenant":"e2e-shared-a-ad5c84","userId":"97f8a13c-9524-4199-9533-bfa57d26ca14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-ee4097\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee4097"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","selected_subscription":"e2e-rate-iso-a-ee4097","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-ee4097@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bfda8aa-6748-4969-b75f-5cedfbd5d3b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46338","PortSpecifier":{"PortValue":46338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46338","PortSpecifier":{"PortValue":46338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368782,"nanos":215532496},"http":{"id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WaHV7DDGQkoHutYO_eMesnwiynJc7ZfGLH3ZhagQWWWXZlgiPNmZz9UyYKhN\"}"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","subscription":"e2e-rate-iso-a-ee4097","tenant":"e2e-shared-a-ad5c84","userId":"97f8a13c-9524-4199-9533-bfa57d26ca14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-ee4097\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee4097"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97f8a13c-9524-4199-9533-bfa57d26ca14","keyName":"e2e-rate-a-ee4097","selected_subscription":"e2e-rate-iso-a-ee4097","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-ee4097@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee4097","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e8ed30-6fcb-4324-8ff9-dd712df97fad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45180","PortSpecifier":{"PortValue":45180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45180","PortSpecifier":{"PortValue":45180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368790,"nanos":919558158},"http":{"id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc162197-f8d2-4be4-bd8c-0b6cf393015b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43960","PortSpecifier":{"PortValue":43960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43960","PortSpecifier":{"PortValue":43960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368790,"nanos":983690319},"http":{"id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55ca7487-9344-4739-8192-c79270607e67","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"]}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eb6c6b5cafe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=047683db-d61a-4a70-8839-94223793b139"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55ca7487-9344-4739-8192-c79270607e67","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5659f0ed-0ae4-4139-82a6-c9f2202070f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368791,"nanos":24532921},"http":{"id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95c29ba-6db3-4a1a-95d9-99d326a50971","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d4931f9-778a-496a-abbc-2ed3b709f705","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368792,"nanos":65710653},"http":{"id":"0d4931f9-778a-496a-abbc-2ed3b709f705","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d4931f9-778a-496a-abbc-2ed3b709f705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38054","PortSpecifier":{"PortValue":38054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c111dbe-c145-42a8-b7b8-db9018b523de","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38054","PortSpecifier":{"PortValue":38054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368793,"nanos":106333844},"http":{"id":"8c111dbe-c145-42a8-b7b8-db9018b523de","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c111dbe-c145-42a8-b7b8-db9018b523de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38058","PortSpecifier":{"PortValue":38058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38058","PortSpecifier":{"PortValue":38058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368794,"nanos":143318809},"http":{"id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe5f3ff-eba3-4414-b223-e52f36272c98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38072","PortSpecifier":{"PortValue":38072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38072","PortSpecifier":{"PortValue":38072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368795,"nanos":185794857},"http":{"id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043449b3-cbdf-4b21-a6e2-c6270ed5c695","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38084","PortSpecifier":{"PortValue":38084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38084","PortSpecifier":{"PortValue":38084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368796,"nanos":222882297},"http":{"id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb92a072-ce22-4819-bc88-29600d8e7ffa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4870abe-705e-44d1-b91a-25f9109e0795","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368797,"nanos":263598146},"http":{"id":"c4870abe-705e-44d1-b91a-25f9109e0795","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4870abe-705e-44d1-b91a-25f9109e0795","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38112","PortSpecifier":{"PortValue":38112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38112","PortSpecifier":{"PortValue":38112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368798,"nanos":298819675},"http":{"id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b8e8680-3b38-4d42-8553-09d2fe2ed48e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38116","PortSpecifier":{"PortValue":38116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38116","PortSpecifier":{"PortValue":38116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368799,"nanos":333399718},"http":{"id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1bcd748-ea8c-43f5-bbf3-e6a8a71288a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38130","PortSpecifier":{"PortValue":38130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38130","PortSpecifier":{"PortValue":38130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368800,"nanos":370125082},"http":{"id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83157ee4-bc7f-4546-9eeb-b0c6e2eea8e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38138","PortSpecifier":{"PortValue":38138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","method":"POST","path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions","host":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38138","PortSpecifier":{"PortValue":38138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368801,"nanos":412140831},"http":{"id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","method":"POST","headers":{":authority":"e2e-shared-a-ad5c84.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AS6CGtXoJpffd2zT_iAcvuM8GsTwKYEVm91B3Pzxem3vk7As0QfdMkrhNVOV\"}"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","subscription":"e2e-rate-iso-a-6d2243","tenant":"e2e-shared-a-ad5c84","userId":"684a399b-c244-4074-b10b-2f1876424677","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\",\"requestedSubscription\":\"e2e-rate-iso-a-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad5c84.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"684a399b-c244-4074-b10b-2f1876424677","keyName":"e2e-rate-a-6d2243","selected_subscription":"e2e-rate-iso-a-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-a-ad5c84/e2e-rate-iso-a-6d2243@ai-tenant-e2e-shared-a-ad5c84/rate-test-model-ad5c84","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad5c84","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d2243","namespace":"ai-tenant-e2e-shared-a-ad5c84","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617ff6a3-c43c-4f75-9cf3-37ef1823ad23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59138","PortSpecifier":{"PortValue":59138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57e56945-83d3-44b1-8ad0-41b953901ed0","method":"POST","path":"/ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db/v1/completions","host":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59138","PortSpecifier":{"PortValue":59138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368801,"nanos":457704672},"http":{"id":"57e56945-83d3-44b1-8ad0-41b953901ed0","method":"POST","headers":{":authority":"e2e-shared-b-d1d0db.apps.48a64fb2-e2fa-4ed2-a84b-2eb6c6b5cafe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B35ThCmPfdbnv7Qr_BoCyiLx2sbxOT9QzFOzY8pj61VuExF04d5h8kuxTs6V"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B35ThCmPfdbnv7Qr_BoCyiLx2sbxOT9QzFOzY8pj61VuExF04d5h8kuxTs6V\"}"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bd82406-d48e-4bc3-9776-bc66ece27c86","keyName":"e2e-rate-b-6d2243","subscription":"e2e-rate-iso-b-6d2243","tenant":"e2e-shared-b-d1d0db","userId":"5bd82406-d48e-4bc3-9776-bc66ece27c86","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db\",\"requestedSubscription\":\"e2e-rate-iso-b-6d2243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d1d0db.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d1d0db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d2243","namespace":"ai-tenant-e2e-shared-b-d1d0db","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6d2243"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bd82406-d48e-4bc3-9776-bc66ece27c86","keyName":"e2e-rate-b-6d2243","selected_subscription":"e2e-rate-iso-b-6d2243","selected_subscription_key":"ai-tenant-e2e-shared-b-d1d0db/e2e-rate-iso-b-6d2243@ai-tenant-e2e-shared-b-d1d0db/rate-test-model-d1d0db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d1d0db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d2243","namespace":"ai-tenant-e2e-shared-b-d1d0db","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e56945-83d3-44b1-8ad0-41b953901ed0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae89e1d39aa0f0b00e5f7ddaafd57c73332556c556b831d565f9e6ae87e3b0fe"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62bd9e89af0fb07fa10ef1f38f38486c268f4c1997bc84c077e9de1e86d5aaae"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/484380bdedc9aacc9c190e11ee9e1a083052b646fdf417dbe6184b19b9625ff2"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ac1c9d03bbce549f0c8ee8e1a4bf67a29ebd7737af7bef3916bc0db3544e38"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f308a3d846397aa187f69daba88572f0489a80c08f2883b61ee07947f0d7396b"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24333c764249222ed4fd0ae49556cfdd37ea663442931eaed01648b4ca93d416"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30443eff37c28903b08d0c6a784faaa2b4b091cf39b123300a08095c9b6cb390"}
{"level":"info","ts":"2026-07-06T20:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422fdbdaa5c419b905d2c94d05651066d1163308a9cb81ee56f2b638d50cfae9"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03c06706061530a5b250de021e78306041aaf10aea1d05a80b6d759a1077fc61"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74d57651f8469039497694fd8be44c2093462fef7b722c41d2011adf8ae02c61"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c88b693e135e6921c2cb68271a74c81b771f5be0d344954c57c443f54157cacb"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b61968406bcd1361f7b9c9536d62a7fa947492e4cd6568989871e959f4ff8b"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c326ea352c6f0067203c1d55c2a170192d30849953b48e04289a4f7997d05ed9"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6cdbc918ee58b8e9b6fd8b43354484919c72a3e80c03b8ec18f831a81fddc1f"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0e3d428c7c26a39b8cf8ba471af30ef64a739a769b573d5364529e310e5922"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/847c5183757a089dfd630d85bb9fed4b2d83e3f2a588fd16472ce2371328bca1"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f43b22d1993830740d18ab354c7a627fedfff353a44449f90e987ea6865651f2"}
{"level":"info","ts":"2026-07-06T20:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b08dec2e9035db4f08baefff3083029db31fec3cd2cfd27bd892f2e0eb7bdc9"}
{"level":"info","ts":"2026-07-06T20:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77fec1073d68666ae7030ab052cd7fcd1b3efa20a669644f75f751a3e396fbdd"}
{"level":"info","ts":"2026-07-06T20:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82aeef8ad6c1ac9682b01e355bee10976917e08d2717b5d185a2a73cc5830e26"}