--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47860","PortSpecifier":{"PortValue":47860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71281d3d-5a30-4056-a817-81ff53deb65c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47860","PortSpecifier":{"PortValue":47860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670113,"nanos":460547993},"http":{"id":"71281d3d-5a30-4056-a817-81ff53deb65c","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71281d3d-5a30-4056-a817-81ff53deb65c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36224","PortSpecifier":{"PortValue":36224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36224","PortSpecifier":{"PortValue":36224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670113,"nanos":508474175},"http":{"id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4998ec-99d0-49a3-be32-a17444e1ef36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47874","PortSpecifier":{"PortValue":47874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47874","PortSpecifier":{"PortValue":47874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670113,"nanos":550630584},"http":{"id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","method":"GET","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eDFjvqQlw9NaJ56z_K3fe0sjJr3lKWhycdoD3ww1YtqaZBqelRQphHD9gf6X"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eDFjvqQlw9NaJ56z_K3fe0sjJr3lKWhycdoD3ww1YtqaZBqelRQphHD9gf6X\"}"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7d939c9-ea2b-4352-88d8-630d9cf8883b","keyName":"e2e-auth-iso-a-8bc2c0","subscription":"e2e-auth-iso-d3a2f5","tenant":"e2e-shared-a-e584ac","userId":"d7d939c9-ea2b-4352-88d8-630d9cf8883b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d3a2f5"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:41:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9473bb67-b1ec-42e1-84de-ff181d5f0de5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"debug","ts":"2026-07-21T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"error","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41638","PortSpecifier":{"PortValue":41638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41638","PortSpecifier":{"PortValue":41638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670130,"nanos":707807054},"http":{"id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cb6402a-b8f5-4f1e-b755-fbfb87c98620","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47078","PortSpecifier":{"PortValue":47078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e52abd2a-32a8-41fe-a197-9363be9cc388","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47078","PortSpecifier":{"PortValue":47078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670130,"nanos":750973158},"http":{"id":"e52abd2a-32a8-41fe-a197-9363be9cc388","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52abd2a-32a8-41fe-a197-9363be9cc388","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670130,"nanos":799890557},"http":{"id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","method":"GET","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11dVUMQR1pOw9NTV0_a1cuahsfk9cUECklSuWPp6lD3Ix4RCAffO6rGpUbvyd"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11dVUMQR1pOw9NTV0_a1cuahsfk9cUECklSuWPp6lD3Ix4RCAffO6rGpUbvyd\"}"}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-21T21:42:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac75d8e-4813-4c62-b2f0-97cfbf792e16","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"error","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"error","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"error","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"error","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"error","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43616","PortSpecifier":{"PortValue":43616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43616","PortSpecifier":{"PortValue":43616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670148,"nanos":99049108},"http":{"id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","tokenreview":{"name":""}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"717395df-a0b1-4313-b2a9-caad26f9b5e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55416","PortSpecifier":{"PortValue":55416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55416","PortSpecifier":{"PortValue":55416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670148,"nanos":133794259},"http":{"id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a642a8a3-b77f-48ed-9d31-b881f4c3d01f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670148,"nanos":173823262},"http":{"id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c923235f-0314-41a5-8cc9-542d31dbd1d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55432","PortSpecifier":{"PortValue":55432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edcff265-0041-413d-aff2-ac89e15de2d7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55432","PortSpecifier":{"PortValue":55432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670148,"nanos":209318518},"http":{"id":"edcff265-0041-413d-aff2-ac89e15de2d7","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edcff265-0041-413d-aff2-ac89e15de2d7","authorized":true,"response":"OK"}
{"level":"error","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35018","PortSpecifier":{"PortValue":35018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35018","PortSpecifier":{"PortValue":35018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670165,"nanos":451992049},"http":{"id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe8fc35c-eeb1-464f-8650-4e0ab643faa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54106","PortSpecifier":{"PortValue":54106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06729fca-d43a-4640-8d15-e9a05108ce46","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54106","PortSpecifier":{"PortValue":54106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670165,"nanos":491057530},"http":{"id":"06729fca-d43a-4640-8d15-e9a05108ce46","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06729fca-d43a-4640-8d15-e9a05108ce46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54122","PortSpecifier":{"PortValue":54122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b293c34-6e54-4e5d-b710-5e89186c6681","method":"GET","path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54122","PortSpecifier":{"PortValue":54122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670165,"nanos":529445184},"http":{"id":"6b293c34-6e54-4e5d-b710-5e89186c6681","method":"GET","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b293c34-6e54-4e5d-b710-5e89186c6681","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d63c232-8994-4546-b05d-ad850495887d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35034","PortSpecifier":{"PortValue":35034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d63c232-8994-4546-b05d-ad850495887d","method":"GET","path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d63c232-8994-4546-b05d-ad850495887d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35034","PortSpecifier":{"PortValue":35034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670165,"nanos":560223126},"http":{"id":"3d63c232-8994-4546-b05d-ad850495887d","method":"GET","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d63c232-8994-4546-b05d-ad850495887d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d63c232-8994-4546-b05d-ad850495887d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a1dc3865-6347-4814-ae61-22d1fca635c1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d63c232-8994-4546-b05d-ad850495887d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d63c232-8994-4546-b05d-ad850495887d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d63c232-8994-4546-b05d-ad850495887d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"error","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"error","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"error","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35014","PortSpecifier":{"PortValue":35014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35014","PortSpecifier":{"PortValue":35014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670182,"nanos":824036734},"http":{"id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3f4bae-b3ce-49bc-8c3e-5de12163e77e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0132de84-7d13-4b41-a2a8-0077575e08e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670182,"nanos":862034793},"http":{"id":"0132de84-7d13-4b41-a2a8-0077575e08e6","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/auth-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0132de84-7d13-4b41-a2a8-0077575e08e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670182,"nanos":903110452},"http":{"id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oTgtUauOYBF9Ihdt_FGzLCWG9nRGUHyLqzWaQl2my9uS24FVQdzmKbewOgPU"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oTgtUauOYBF9Ihdt_FGzLCWG9nRGUHyLqzWaQl2my9uS24FVQdzmKbewOgPU\"}"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d1fe4cdf-0b45-462e-aeb0-d6e9de5c786b","keyName":"e2e-auth-iso-a-f69adb","subscription":"e2e-auth-iso-f7abc4","tenant":"e2e-shared-a-e584ac","userId":"d1fe4cdf-0b45-462e-aeb0-d6e9de5c786b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/auth-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f7abc4"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a7fa3b-4e5d-4340-bc2c-47fdda0db133","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48ba0849b16d6656bca0b32789dbd0925a6c7571563b36ed3fb9fdfeb26d7a1"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbe851c58f879ad1083f4bda43325bc84fc716a18a6c4d45716bdd958177b04"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afff78314619b1bac2a859c50162cbe09bfb13350692747f42342a99010d0fc2"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395f0978681d619359aed984a6bd2658525c16ace1bac7c31d8e4d80efd3e2c2"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70737ad92496c614f56e7a32fbefca480d06d32ad7bd13eed49fb4207f65a32"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4a61f95a72d7d6f3992acefc44c9c48b5e97ff36f3fcbe05c463c07b32c165"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92679d0e0c52a82433ac42a0848e0dcdf83ea1bf8c0439bd55afb540ff1206b4"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c651a798ef3dea0f0ea7f2703753da88d09dd1d8da34c1786146f306e5eaff4"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad08c087fe82f15ef1a287adba6f42eec70af768d3874fcd361d1c656fddf78b"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a8899461981a124ed79956a0f1364d350c18cdd60a874c657dc2e5a14b9fa4b"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee87fd9e001c6522232366bee517d6aed1643c74029d930374819f1fc19e1277"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/373692a88dc21efb47d5cdec3a9d9cf253307e758b7f3813c310976ec18284f2"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed587c76594c4ca0670fc7b53f8b7de82082da0d4be05e22513f71c7d83823e"}
{"level":"info","ts":"2026-07-21T21:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/312de78afe7ff6b3d1c7b86a2211e0cc18132a5c1d2387889513831ab22a792c"}
{"level":"info","ts":"2026-07-21T21:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9180bee7cb5ba2e000e89c5cfffee2f3efafc8d6ed8f2c6d34fd5ed45e74fc3"}
{"level":"info","ts":"2026-07-21T21:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2e2a856d4e4d4340d78669d8b11136b4bbaec14df76502104a50efd48fe930"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2"}
{"level":"error","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"}
{"level":"info","ts":"2026-07-21T21:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91"}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670234,"nanos":439443620},"http":{"id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/sub-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b790beb5-acf9-4fee-8dde-7355d1afbf03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36688","PortSpecifier":{"PortValue":36688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36688","PortSpecifier":{"PortValue":36688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670234,"nanos":480058980},"http":{"id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/sub-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d99361-aea9-4132-acfe-aa6ac5238c48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46248","PortSpecifier":{"PortValue":46248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46248","PortSpecifier":{"PortValue":46248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670234,"nanos":524818859},"http":{"id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","method":"GET","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IzmWYoqgCQ6yTp2O_tSQrazlmyAophh23L3xmgCSjZpIbA9YThVVWHNJpzBR"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IzmWYoqgCQ6yTp2O_tSQrazlmyAophh23L3xmgCSjZpIbA9YThVVWHNJpzBR\"}"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"370d5ba2-217d-4a10-99fa-89d143ecfb1d","keyName":"e2e-sub-iso-53aee6","subscription":"e2e-a-only-f79d8a","tenant":"e2e-shared-a-e584ac","userId":"370d5ba2-217d-4a10-99fa-89d143ecfb1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/sub-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f79d8a"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5c896f-1f78-4ab4-b05b-fb38b754fb59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36704","PortSpecifier":{"PortValue":36704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36704","PortSpecifier":{"PortValue":36704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670234,"nanos":559988324},"http":{"id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","method":"GET","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GntvMbUzkBJqcNa_SKCRE4oUnKjWM4YSnNGS4uGOZowkuLv3gnXkYxfgYSp"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GntvMbUzkBJqcNa_SKCRE4oUnKjWM4YSnNGS4uGOZowkuLv3gnXkYxfgYSp\"}"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"834ef2e7-a870-4107-8a92-9347ae96658d","keyName":"e2e-sub-iso-4cba8d","subscription":"e2e-b-only-f79d8a","tenant":"e2e-shared-b-24ec74","userId":"834ef2e7-a870-4107-8a92-9347ae96658d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/sub-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f79d8a"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e27b45d5-caae-419e-8d79-d4822fb4adc3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670246,"nanos":879712834},"http":{"id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/sub-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84a11cf2-e7fd-4518-bd7e-9c5eddd72ce9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a55f1315-2a03-40ae-9731-58b1319e4b33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670246,"nanos":922945224},"http":{"id":"a55f1315-2a03-40ae-9731-58b1319e4b33","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/sub-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a55f1315-2a03-40ae-9731-58b1319e4b33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db330ea-6914-401d-8e41-81753c0b2555","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7db330ea-6914-401d-8e41-81753c0b2555","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db330ea-6914-401d-8e41-81753c0b2555","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670246,"nanos":961328506},"http":{"id":"7db330ea-6914-401d-8e41-81753c0b2555","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LQCg6FpvR1YQeDNR_mHNBdipeAJugE1GiwpXa958sQRB1DkBesu2Mm2KvsWi"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LQCg6FpvR1YQeDNR_mHNBdipeAJugE1GiwpXa958sQRB1DkBesu2Mm2KvsWi\"}"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fcbbd48e-a95f-4320-bbdb-81bcdaa33ea6","keyName":"e2e-sub-iso-965756","subscription":"e2e-shared-sub-e02101","tenant":"e2e-shared-a-e584ac","userId":"fcbbd48e-a95f-4320-bbdb-81bcdaa33ea6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7db330ea-6914-401d-8e41-81753c0b2555","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/sub-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e02101"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7db330ea-6914-401d-8e41-81753c0b2555","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db330ea-6914-401d-8e41-81753c0b2555","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db330ea-6914-401d-8e41-81753c0b2555","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40186","PortSpecifier":{"PortValue":40186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40186","PortSpecifier":{"PortValue":40186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670246,"nanos":993759868},"http":{"id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4iqouW0nJs2IRt5f_sVFFBKdEO4Gs7foDLr0CHdNR2WexHTa4mQomoNGDih9"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4iqouW0nJs2IRt5f_sVFFBKdEO4Gs7foDLr0CHdNR2WexHTa4mQomoNGDih9\"}"}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"253a2879-4ae4-4312-8167-4afbbb6a5f53","keyName":"e2e-sub-iso-d24997","subscription":"e2e-shared-sub-e02101","tenant":"e2e-shared-b-24ec74","userId":"253a2879-4ae4-4312-8167-4afbbb6a5f53","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/sub-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e02101"}
{"level":"info","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:44:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dfb5d7c-ffda-45a9-9358-28f7a829de78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a008682614bc9537ffc19bc867e2694ef2b1df447ba724c0bd710e2b4af6168"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bce24abef7487f5bbed9f77fb8306283cc942433b67fca5a70d4bf0956940df5"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c90d98048942af6eadb2343ea46b8b6301179b0dbce8e391cab4d6c1742ec5b8"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1376340e775d2375737b064f2e446377ef89c33d7a8ee6ecea3b3314cdc141d1"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5f6ab157364da168413f1f5ae173f0beec6c708c5f8b099d4376bc8dc331ff6"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ede753fb5cc15ea45fd38948f0490d880d74b40c38042b9bf1f30b67f441d2"}
{"level":"info","ts":"2026-07-21T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dff6d198349ded7e994ca5c6f7d3bb1cc3ceb0381387b50e437cfb981c21872"}
{"level":"info","ts":"2026-07-21T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4331313ff732a6457f2e1e6dde6d4a260c735c60fb424d037359da06137f1d2a"}
{"level":"info","ts":"2026-07-21T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24fcb2e19f185b4460c8db7143af2600fc7f6234dd6e6da2500e9cc35dc751ce"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04f89e1d3eed6efc99ff686e1d9ef74aa69ea7f611c32ec4b51dc9927c9025c4"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b330f404b68330e60bde87173ba801ca72686f441bbd086aad60234936ea3b37"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afae4cc7a91a24d63adcae01c4bea19818f560b87145548e0945d74383d9649"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d0cf50b654b98d480f4ab35ecaaa2a612c757629088edff9cbde90d24c14d6"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df1710beecb1923ee1ac1b0e3dee20e64a3d4709095c27781132c3f248234a91"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2977f4d1cbe2a92b72fafca801428ce63a8f5f752c12e8023a504adfe887d691"}
{"level":"info","ts":"2026-07-21T21:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25504248a15f1d8583821b23e6e71c1681fb06539869f0773c3755dcdeba1b83"}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"error","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"error","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"error","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa"}
{"level":"error","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1"}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"debug","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"error","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39576","PortSpecifier":{"PortValue":39576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39576","PortSpecifier":{"PortValue":39576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670309,"nanos":321641965},"http":{"id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0380dc0d-3b90-42ef-a57b-4a09fec1a262","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53052","PortSpecifier":{"PortValue":53052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df9b7061-02aa-408a-90d3-aa2923c0f301","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53052","PortSpecifier":{"PortValue":53052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670309,"nanos":362354981},"http":{"id":"df9b7061-02aa-408a-90d3-aa2923c0f301","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9b7061-02aa-408a-90d3-aa2923c0f301","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39582","PortSpecifier":{"PortValue":39582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"004535dc-5c7a-42f2-a36a-2561b03cae76","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39582","PortSpecifier":{"PortValue":39582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670309,"nanos":402802686},"http":{"id":"004535dc-5c7a-42f2-a36a-2561b03cae76","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"004535dc-5c7a-42f2-a36a-2561b03cae76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670310,"nanos":464859793},"http":{"id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2aac7af2-c85d-4115-b1dc-99d749a1cd20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35676","PortSpecifier":{"PortValue":35676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35676","PortSpecifier":{"PortValue":35676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670311,"nanos":507404618},"http":{"id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99eb2d9e-7b9d-4041-b737-03f0f3107d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70731b11-1687-4ed3-a633-19fecc61a805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35690","PortSpecifier":{"PortValue":35690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70731b11-1687-4ed3-a633-19fecc61a805","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70731b11-1687-4ed3-a633-19fecc61a805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35690","PortSpecifier":{"PortValue":35690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670312,"nanos":546332670},"http":{"id":"70731b11-1687-4ed3-a633-19fecc61a805","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70731b11-1687-4ed3-a633-19fecc61a805","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70731b11-1687-4ed3-a633-19fecc61a805","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70731b11-1687-4ed3-a633-19fecc61a805","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70731b11-1687-4ed3-a633-19fecc61a805","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c023128c-77dc-44eb-836f-164c68af67f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35706","PortSpecifier":{"PortValue":35706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c023128c-77dc-44eb-836f-164c68af67f4","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c023128c-77dc-44eb-836f-164c68af67f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35706","PortSpecifier":{"PortValue":35706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670313,"nanos":584436383},"http":{"id":"c023128c-77dc-44eb-836f-164c68af67f4","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c023128c-77dc-44eb-836f-164c68af67f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c023128c-77dc-44eb-836f-164c68af67f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c023128c-77dc-44eb-836f-164c68af67f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c023128c-77dc-44eb-836f-164c68af67f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35722","PortSpecifier":{"PortValue":35722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35722","PortSpecifier":{"PortValue":35722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670314,"nanos":625653270},"http":{"id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a9d7-a7ab-4667-9bfe-9199866bcd1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35728","PortSpecifier":{"PortValue":35728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"389cca42-15a5-4720-8b68-0f97f93a57ea","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35728","PortSpecifier":{"PortValue":35728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670315,"nanos":666129772},"http":{"id":"389cca42-15a5-4720-8b68-0f97f93a57ea","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"389cca42-15a5-4720-8b68-0f97f93a57ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35742","PortSpecifier":{"PortValue":35742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35742","PortSpecifier":{"PortValue":35742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670316,"nanos":735873284},"http":{"id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qxqq5go9mfcdL3vZ_rGB3oDfKYsjce4gBaCaACYIN26nNzvEhkFf9ajMTvt6\"}"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","subscription":"e2e-rate-iso-a-bdf8ae","tenant":"e2e-shared-a-e584ac","userId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-bdf8ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdf8ae"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70dc88d4-9bd0-4a5d-8343-4668615ed807","keyName":"e2e-rate-a-bdf8ae","selected_subscription":"e2e-rate-iso-a-bdf8ae","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-bdf8ae@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdf8ae","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43a8136-6164-4e11-86ec-81a1fd6db6c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670325,"nanos":872726716},"http":{"id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7192ca8-535a-4971-95f9-fdf80040c5e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55414","PortSpecifier":{"PortValue":55414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55414","PortSpecifier":{"PortValue":55414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670325,"nanos":939441566},"http":{"id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"53006d43-ceb2-495a-b14f-38750ec9f735","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"]}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03f78bfa7495"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8bf6eb0b-9752-4b55-aa51-fd32da69924a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"53006d43-ceb2-495a-b14f-38750ec9f735","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065dcc2c-16e1-4ce6-b20a-1f9936369ec2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"341abb9f-c250-44a9-88be-01442f7ea5c4","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670325,"nanos":980118844},"http":{"id":"341abb9f-c250-44a9-88be-01442f7ea5c4","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX\"}"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","subscription":"e2e-rate-iso-a-5a8e1f","tenant":"e2e-shared-a-e584ac","userId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5a8e1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a8e1f"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","selected_subscription":"e2e-rate-iso-a-5a8e1f","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-5a8e1f@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341abb9f-c250-44a9-88be-01442f7ea5c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45366","PortSpecifier":{"PortValue":45366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45366","PortSpecifier":{"PortValue":45366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670327,"nanos":21974982},"http":{"id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX\"}"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","subscription":"e2e-rate-iso-a-5a8e1f","tenant":"e2e-shared-a-e584ac","userId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5a8e1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a8e1f"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","selected_subscription":"e2e-rate-iso-a-5a8e1f","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-5a8e1f@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ddfb3a-42c2-4a9b-a1e6-6b9ca9f263c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45382","PortSpecifier":{"PortValue":45382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25430915-7357-44e6-abfc-f882cd2b5d59","method":"POST","path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions","host":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45382","PortSpecifier":{"PortValue":45382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670328,"nanos":61884530},"http":{"id":"25430915-7357-44e6-abfc-f882cd2b5d59","method":"POST","headers":{":authority":"e2e-shared-a-e584ac.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JYsgxktb7c7vp0lg_DOjhyVAbB09TnbYhaCiWkdQI2cABd91syLSJSKewiUX\"}"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","subscription":"e2e-rate-iso-a-5a8e1f","tenant":"e2e-shared-a-e584ac","userId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5a8e1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e584ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e584ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a8e1f"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae2d348b-bd47-41ba-a3f6-e248afd217a7","keyName":"e2e-rate-a-5a8e1f","selected_subscription":"e2e-rate-iso-a-5a8e1f","selected_subscription_key":"ai-tenant-e2e-shared-a-e584ac/e2e-rate-iso-a-5a8e1f@ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e584ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a8e1f","namespace":"ai-tenant-e2e-shared-a-e584ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e584ac/rate-test-model-e584ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25430915-7357-44e6-abfc-f882cd2b5d59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","method":"POST","path":"/ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74/v1/completions","host":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784670328,"nanos":96254885},"http":{"id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","method":"POST","headers":{":authority":"e2e-shared-b-24ec74.apps.0882b177-5f5b-40a6-aa64-03f78bfa7495.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uncY8bs8I3eDQp7Q_U8rkKRBdozD6ttZqp8H4fg2hPgzuxnGSdT5DQnAbtDr"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uncY8bs8I3eDQp7Q_U8rkKRBdozD6ttZqp8H4fg2hPgzuxnGSdT5DQnAbtDr\"}"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe65f7ba-d12f-4ef2-9045-d3a1823f25d8","keyName":"e2e-rate-b-5a8e1f","subscription":"e2e-rate-iso-b-5a8e1f","tenant":"e2e-shared-b-24ec74","userId":"fe65f7ba-d12f-4ef2-9045-d3a1823f25d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74\",\"requestedSubscription\":\"e2e-rate-iso-b-5a8e1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-24ec74.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-24ec74","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5a8e1f","namespace":"ai-tenant-e2e-shared-b-24ec74","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74"}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-24ec74/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5a8e1f"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe65f7ba-d12f-4ef2-9045-d3a1823f25d8","keyName":"e2e-rate-b-5a8e1f","selected_subscription":"e2e-rate-iso-b-5a8e1f","selected_subscription_key":"ai-tenant-e2e-shared-b-24ec74/e2e-rate-iso-b-5a8e1f@ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-24ec74","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5a8e1f","namespace":"ai-tenant-e2e-shared-b-24ec74","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-24ec74/rate-test-model-24ec74"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54a7cd8b-1c59-403f-9ecc-b6ff4467f322","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ba7d4a4e0750c8cefc0ac1bb91628e22c5c56fc2b85ae3b2b020cb93e22d04"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874c342c102031151229c898eb1be07a38fd964e037074ffa11f2a8058e2364a"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe70108dc426a0506f24819396b7d387241ed4a4f93ce861260ced6a4c9f552c"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/302e1dc0be19aaa1ce92c7f02777c4c429bf7dc3006e0230b05949b46cedb38a"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df1fe84468de7eadf9fad76e43b03e31262f2010d1ec2fe81d8ccc4db64d1701"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fadf2ef0b02aa259c113f0684f8cac3a4eccee0437cbf5761aebdd7ca8bf9867"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae3b03beb6ea2e155c14218f43e2c0f70c9a402f95681179ae16da400a98cf79"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1ed1f5082bc96ef0e238db573c7a491fedc76ecc7f6cf790b8fa674dc24ece"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc7ec16ef803b9ad8b96f70509a8f61cbf15cdd74e5ce9734a9a5520e4315dff"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15703863ca9027f27616c402c60e788b5ab1f3b7e6bf16cc9e69a95e65ccdf59"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a07b1d8ecc43bd9cfaee018e614c34380109af366b8f3ef7948d4bd72639e1c"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30aa3979df9cf224037df7dba54d5bd2706a256263f2d5321bda2b49bf4559d3"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9152050969e08dceba0086ad122b7439ef2a73e6b91bd9f76c1f78591fbeb1"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7d88f67e527eb08038d3a8662eba8f73e3a63329157f46e3c800f8cb0d4ee47"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87ca87d07b6391e36fc75ad181d56bde5e1de4f985d1348bbc158412ac6c92c2"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e5ceb446a26f012c2108544e889774c7866da5b6abca9c5e91edfbf66df930"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a3fd8ed6321370230efc5697d6198cafec9b1c6dd1738b1f4f46966df3d7337"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e79300c14c39968a050e7fdb53f3a26106a5d07ad197b569db45b6631039faaa"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c2e4e88205a2a311ac4b99a87d2ef95622f0c880d3a4c486c63f3ae6faa0c7"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350355a2450c1e457759488252d4bcc84bc412e2ac328741ee97154e4ef15c17"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ae379c879f1ea7d7698a04c447c796690d276dbecb0425260b6b8b40c85eaea"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f672c2cdcc1526df3d421e1d7d643464753c4f682397aaa31ad8c016c4b9d4d"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1320feba8517528c67ca3e619ad255d6442ef38867fe4bbc9d034e5c18a89a19"}
{"level":"info","ts":"2026-07-21T21:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bec0f4a02137ec8564b74ba793685cb5e13b484414c385b6b09b4e2de36c997"}