--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T04:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"error","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T04:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84cb609-bda2-4951-8397-635b2176e150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c84cb609-bda2-4951-8397-635b2176e150","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84cb609-bda2-4951-8397-635b2176e150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214786,"nanos":708878049},"http":{"id":"c84cb609-bda2-4951-8397-635b2176e150","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c84cb609-bda2-4951-8397-635b2176e150","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c84cb609-bda2-4951-8397-635b2176e150","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84cb609-bda2-4951-8397-635b2176e150","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84cb609-bda2-4951-8397-635b2176e150","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84cb609-bda2-4951-8397-635b2176e150","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45746","PortSpecifier":{"PortValue":45746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45746","PortSpecifier":{"PortValue":45746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214786,"nanos":750186780},"http":{"id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/auth-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"324cfd79-6cca-417c-8cdc-ebf4c7b6e54c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"130fc383-b8e4-452d-8a76-47992534feb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40050","PortSpecifier":{"PortValue":40050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"130fc383-b8e4-452d-8a76-47992534feb0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"130fc383-b8e4-452d-8a76-47992534feb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40050","PortSpecifier":{"PortValue":40050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214786,"nanos":812814529},"http":{"id":"130fc383-b8e4-452d-8a76-47992534feb0","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"130fc383-b8e4-452d-8a76-47992534feb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"130fc383-b8e4-452d-8a76-47992534feb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc383-b8e4-452d-8a76-47992534feb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"130fc383-b8e4-452d-8a76-47992534feb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"130fc383-b8e4-452d-8a76-47992534feb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214786,"nanos":857775541},"http":{"id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/auth-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T04:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e466eff4-f71f-4a90-a8a9-958f3abbb0c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T04:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"error","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54204","PortSpecifier":{"PortValue":54204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54204","PortSpecifier":{"PortValue":54204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214827,"nanos":85563528},"http":{"id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7715ee0e-51aa-430a-bc9c-42a6404ef105","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33436","PortSpecifier":{"PortValue":33436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33436","PortSpecifier":{"PortValue":33436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214827,"nanos":123975241},"http":{"id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/auth-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0e7c4d7-0bf7-4aac-b007-08e6100e278a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a76484-1782-4110-9379-668272789f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33452","PortSpecifier":{"PortValue":33452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a76484-1782-4110-9379-668272789f01","method":"GET","path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a76484-1782-4110-9379-668272789f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33452","PortSpecifier":{"PortValue":33452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214827,"nanos":170376744},"http":{"id":"f6a76484-1782-4110-9379-668272789f01","method":"GET","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a76484-1782-4110-9379-668272789f01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a76484-1782-4110-9379-668272789f01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/auth-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a76484-1782-4110-9379-668272789f01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a76484-1782-4110-9379-668272789f01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a76484-1782-4110-9379-668272789f01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54206","PortSpecifier":{"PortValue":54206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98169429-4766-47f8-8545-ac2ae936e5d2","method":"GET","path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54206","PortSpecifier":{"PortValue":54206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214827,"nanos":206140357},"http":{"id":"98169429-4766-47f8-8545-ac2ae936e5d2","method":"GET","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/32113d26-58cb-4138-98f4-13738fcefa4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98169429-4766-47f8-8545-ac2ae936e5d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"error","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"error","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"error","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:00:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52452","PortSpecifier":{"PortValue":52452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea24acb3-a775-429d-a04f-3c63c21f962f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52452","PortSpecifier":{"PortValue":52452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214865,"nanos":343236931},"http":{"id":"ea24acb3-a775-429d-a04f-3c63c21f962f","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea24acb3-a775-429d-a04f-3c63c21f962f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bffbc47-56f2-4e07-a201-c7f010239daa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214865,"nanos":391424056},"http":{"id":"6bffbc47-56f2-4e07-a201-c7f010239daa","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/auth-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bffbc47-56f2-4e07-a201-c7f010239daa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22658945-f42e-43fb-9b19-7219b12deca8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22658945-f42e-43fb-9b19-7219b12deca8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22658945-f42e-43fb-9b19-7219b12deca8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214865,"nanos":459344171},"http":{"id":"22658945-f42e-43fb-9b19-7219b12deca8","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UtXoVWJBsGuEbIjx_4fcG5XocSCDIL2buOo7feXl5E7Wxxegv0ju2Z8QD5fB"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UtXoVWJBsGuEbIjx_4fcG5XocSCDIL2buOo7feXl5E7Wxxegv0ju2Z8QD5fB\"}"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0672f89-f0e8-4e76-a538-3e347770f5d6","keyName":"e2e-auth-iso-a-81cddc","subscription":"e2e-auth-iso-4c8fd4","tenant":"e2e-shared-a-1badbb","userId":"d0672f89-f0e8-4e76-a538-3e347770f5d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22658945-f42e-43fb-9b19-7219b12deca8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/auth-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4c8fd4"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22658945-f42e-43fb-9b19-7219b12deca8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22658945-f42e-43fb-9b19-7219b12deca8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22658945-f42e-43fb-9b19-7219b12deca8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2256bec78be62c3ee61fa5593ab08d43587c05441a7f3221eb9b411aaa14973e"}
{"level":"info","ts":"2026-07-28T05:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7f8cbc7b187f8d7e13d6f3133b9c5b7ff2e7c9ea8459b025ca62ea7ed9e8ff"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e625fac8fd9bb4c6cb20c08c5caf992f573758ebee57f9e2f4950f39ccc40f"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a6fdc2c77d81f4b6038feca52b9a4166e12059c836891cbf6a1c6df6bf6ca9c"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48194e1e706301bde0c8311934e48ae8a6e0a8ec7b70e48cf9fddb358f91928"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bea9e4613a3d97b869e9c799b380c79956b8b718e79bd4af171b45e730127d7"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0eaca2f19aa5d7a9227eb5272076ee5ce6fee233fee76fcd777ccb56460096c"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20efb11bb9d821d7b6d628c717459eb11dacd56c055a4d13ad62676a5ba8fc06"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238661cdee9d590315641e555bf55adf762d7c8fa6da1265ea5fed38c008d349"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16420e8beaedbf38177efb21f77ba17475718cc142052cb5432dbd608d697959"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7939cf7c7ec01ad7d686762fd524920212067570ee83edeaa018584ed4ba6fa3"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf9f89006c35785ba727715b51c41b0d2efbc2848dec300c479092d05221e7bb"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eded0003c8bc0c28cd17c4d9d39f749fb3729b1fadea0a04c2482f660f46ebc0"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f4586419d8ab4fb22c8968f291c2b1ce61bde6f490c5c3d5aa7df2820e22a04"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87a5e5b1d77cb83c6542a9bef44ddf31abe1d119db39a895bd4ff38eb4b66452"}
{"level":"info","ts":"2026-07-28T05:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0df7a3c3dacefca3b09abd2edcaca3a2adc35c15929972b97aae0d9ccdde491"}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"debug","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"debug","ts":"2026-07-28T05:02:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83"}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42348","PortSpecifier":{"PortValue":42348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42348","PortSpecifier":{"PortValue":42348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214965,"nanos":744330589},"http":{"id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/sub-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2359c8fe-9b7f-4a5e-941c-fc2884d588f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52490","PortSpecifier":{"PortValue":52490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52490","PortSpecifier":{"PortValue":52490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214965,"nanos":789432950},"http":{"id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/sub-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719770df-3bd4-4c1c-b15d-dd8e8802f8f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"459c799e-adb5-4e12-a863-79aa598ce476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42354","PortSpecifier":{"PortValue":42354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"459c799e-adb5-4e12-a863-79aa598ce476","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"459c799e-adb5-4e12-a863-79aa598ce476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42354","PortSpecifier":{"PortValue":42354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214965,"nanos":839399761},"http":{"id":"459c799e-adb5-4e12-a863-79aa598ce476","method":"GET","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-v07O0nodhoarlyw6_jGAhRlNgSVyXwOKg8hglp7dEZAvPowqUcmfYDRz98X"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-v07O0nodhoarlyw6_jGAhRlNgSVyXwOKg8hglp7dEZAvPowqUcmfYDRz98X\"}"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d8467e8-f723-4f99-a24b-92226151a42a","keyName":"e2e-sub-iso-384150","subscription":"e2e-a-only-e3f83a","tenant":"e2e-shared-a-1badbb","userId":"3d8467e8-f723-4f99-a24b-92226151a42a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"459c799e-adb5-4e12-a863-79aa598ce476","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/sub-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e3f83a"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"459c799e-adb5-4e12-a863-79aa598ce476","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"459c799e-adb5-4e12-a863-79aa598ce476","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"459c799e-adb5-4e12-a863-79aa598ce476","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52500","PortSpecifier":{"PortValue":52500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08992500-32fc-4cf3-b103-bac5d759b91b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52500","PortSpecifier":{"PortValue":52500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214965,"nanos":910986618},"http":{"id":"08992500-32fc-4cf3-b103-bac5d759b91b","method":"GET","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M8fYD9vEALNC4bZg_uEU0nTWu2yASdqPsn0lqMD3pYtBvpwuMr0BPXG8XwAT"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M8fYD9vEALNC4bZg_uEU0nTWu2yASdqPsn0lqMD3pYtBvpwuMr0BPXG8XwAT\"}"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13fecfed-63e6-493b-a921-a217191c8801","keyName":"e2e-sub-iso-e76fd2","subscription":"e2e-b-only-e3f83a","tenant":"e2e-shared-b-92c557","userId":"13fecfed-63e6-493b-a921-a217191c8801","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/sub-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e3f83a"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:02:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08992500-32fc-4cf3-b103-bac5d759b91b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53980","PortSpecifier":{"PortValue":53980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53980","PortSpecifier":{"PortValue":53980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214990,"nanos":955247795},"http":{"id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/sub-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d18767-7e9d-4a24-bf9c-6bac72e2819b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45466","PortSpecifier":{"PortValue":45466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"621ad7a6-674a-4c9f-a407-18600560a7bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45466","PortSpecifier":{"PortValue":45466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214991,"nanos":6364619},"http":{"id":"621ad7a6-674a-4c9f-a407-18600560a7bd","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/sub-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"621ad7a6-674a-4c9f-a407-18600560a7bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214991,"nanos":52920793},"http":{"id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CsPpIxQytIGmaoPH_jg71ggYyYwYBkNUSlT1OYcrDPDvjQOukCgsOetOdkRN"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CsPpIxQytIGmaoPH_jg71ggYyYwYBkNUSlT1OYcrDPDvjQOukCgsOetOdkRN\"}"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40cf01a9-2827-4a5f-9bfd-0123d5221230","keyName":"e2e-sub-iso-345ee2","subscription":"e2e-shared-sub-ec9094","tenant":"e2e-shared-a-1badbb","userId":"40cf01a9-2827-4a5f-9bfd-0123d5221230","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/sub-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ec9094"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba4af87-4d95-4b48-b9d9-3faeb0d8b4c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45468","PortSpecifier":{"PortValue":45468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45468","PortSpecifier":{"PortValue":45468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785214991,"nanos":96007374},"http":{"id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qjpb2vbF9neO12BO_6oqyYqiwGGdFIkjFskXNlnpaJR6xlwMqv92Ms0sIHka"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qjpb2vbF9neO12BO_6oqyYqiwGGdFIkjFskXNlnpaJR6xlwMqv92Ms0sIHka\"}"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e79d312c-3507-41f7-a0e6-a5285eb706cc","keyName":"e2e-sub-iso-fe9f93","subscription":"e2e-shared-sub-ec9094","tenant":"e2e-shared-b-92c557","userId":"e79d312c-3507-41f7-a0e6-a5285eb706cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/sub-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ec9094"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66d1c2a5-7290-48ed-8ac4-a8685be3a09b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d63c39c94db8dec8b6ad98eae23ad1dae4a7ba3935f01e1b1093e5b6ee51430"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b4c59c22c9307322310f566942b23f452907d5f865ae06e638ae1113fe7bee0"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b54b4973e6d884dfbeb9379f07e49f50b295517dabbcd0eeda1c9dcf02e8aa"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cc58b22cfa1ed7f865750e045f742498a92679380e9e53e606fd282af634b6f"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c54c3cda2a98a9ace1cf50bd71538ec4f88ec20538c8069f2147f13eed60fa3a"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b103c96136d8277acf6c33e4aa537f2c0b4e59fa8aaa620fe66cad1d2a4c3dd6"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cfb3fe9e6c229e74eaca07cf169e3a7e80d88bbf06a2805e7070ead5bd9a787"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28c9c7271b9d166ff9abe0f8bcce31406a4f3ab6b30b6edfb83cb1aa01a5b71e"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837091a5a53ad1774619a9ca2a48563cf80caccbf927d56d0662d3831effa0b1"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e9d8f3f86063b827c91c34bdac8368dc193faddc643fe7b044be3fa41f8673"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25efd51d1178a352a4ed87990166c6410174f380c5dcb2a4673e096132facd83"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e958ef419292543d423b0103288b5870a698bae15842392603d0c7961b4182b"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08ea0f7b4666c3a305edb145bf3c53f5fe0d2a5ecf993b61f71c105b5f0bb5f1"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03223d4cca1cd9b0dcc668488bcd224b07ceb6cc7fc509f27df89d6fa681eaa8"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7b4839079e4288577bbe44ad0cfcba864e168332f07192459a1d180e5807500"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c2639f085b19b9a7b5480dda1b4679456ba3a8f3db51adceedd41b2b99c0fd"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb"}
{"level":"debug","ts":"2026-07-28T05:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8"}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f"}
{"level":"info","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878"}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e"}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:04:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:04:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215065,"nanos":294197148},"http":{"id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39d3d5e-ba64-46b9-a65f-1b11d9b584c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215065,"nanos":342378532},"http":{"id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc0b026-17f7-4e7a-8658-16d8ff3cf149","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f688024-621d-4dfb-9157-3a4a95c221c2","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215065,"nanos":385203103},"http":{"id":"7f688024-621d-4dfb-9157-3a4a95c221c2","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD\"}"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","subscription":"e2e-rate-iso-a-c82e35","tenant":"e2e-shared-a-1badbb","userId":"955cc128-137b-452f-bcd5-9eee7a06302d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-c82e35\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82e35"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","selected_subscription":"e2e-rate-iso-a-c82e35","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-c82e35@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f688024-621d-4dfb-9157-3a4a95c221c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215066,"nanos":490437208},"http":{"id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD\"}"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","subscription":"e2e-rate-iso-a-c82e35","tenant":"e2e-shared-a-1badbb","userId":"955cc128-137b-452f-bcd5-9eee7a06302d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-c82e35\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82e35"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","selected_subscription":"e2e-rate-iso-a-c82e35","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-c82e35@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2884108d-0e01-4ebe-997b-83b749b0c6a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215067,"nanos":533088803},"http":{"id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8J873JYWWwOky25o_dTBLX0FgjLIvywc0BHQdVBV2MyUVAOrOJOCTo0LA4PD\"}"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","subscription":"e2e-rate-iso-a-c82e35","tenant":"e2e-shared-a-1badbb","userId":"955cc128-137b-452f-bcd5-9eee7a06302d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-c82e35\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82e35"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"955cc128-137b-452f-bcd5-9eee7a06302d","keyName":"e2e-rate-a-c82e35","selected_subscription":"e2e-rate-iso-a-c82e35","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-c82e35@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82e35","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bc011a2-2e05-4225-9d9d-9e518f526f53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51410","PortSpecifier":{"PortValue":51410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51410","PortSpecifier":{"PortValue":51410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215086,"nanos":866963088},"http":{"id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bbbc621-62f1-4e45-99cd-8a91cf37b6a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46600","PortSpecifier":{"PortValue":46600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46600","PortSpecifier":{"PortValue":46600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215086,"nanos":906711614},"http":{"id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c0ed2ee-69f2-4c06-bd38-3eb9b10ae28a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51414","PortSpecifier":{"PortValue":51414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7fb7077-668b-4995-8501-8c82a48c2973","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51414","PortSpecifier":{"PortValue":51414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215086,"nanos":940712093},"http":{"id":"b7fb7077-668b-4995-8501-8c82a48c2973","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7fb7077-668b-4995-8501-8c82a48c2973","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215087,"nanos":984959884},"http":{"id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97de8bd9-4f11-450c-bf52-4ba85a3f29c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60392","PortSpecifier":{"PortValue":60392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17d24a93-193b-4b89-8c9d-515c16e859ac","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60392","PortSpecifier":{"PortValue":60392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215089,"nanos":32960733},"http":{"id":"17d24a93-193b-4b89-8c9d-515c16e859ac","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17d24a93-193b-4b89-8c9d-515c16e859ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215090,"nanos":75205260},"http":{"id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f50f69d-15ee-43ca-aa75-e6f6db088e47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60424","PortSpecifier":{"PortValue":60424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60424","PortSpecifier":{"PortValue":60424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215091,"nanos":120639719},"http":{"id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffd8bb9-30fc-4dfe-93b1-1c0677ba06dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a49d0a6-5342-45ec-957c-e53b376e0264","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215092,"nanos":159542630},"http":{"id":"2a49d0a6-5342-45ec-957c-e53b376e0264","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a49d0a6-5342-45ec-957c-e53b376e0264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60444","PortSpecifier":{"PortValue":60444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60444","PortSpecifier":{"PortValue":60444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215093,"nanos":208651198},"http":{"id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"786eb7a4-d0bc-49cb-9cb4-9e0ffd57ada7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60452","PortSpecifier":{"PortValue":60452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","method":"POST","path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions","host":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60452","PortSpecifier":{"PortValue":60452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215094,"nanos":250190637},"http":{"id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","method":"POST","headers":{":authority":"e2e-shared-a-1badbb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1boP35Ei853FTE9s5_yT4Okhlc4VG1H5nldlGFwKKkNCXPHAa2i58tsdaX8Jy\"}"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","subscription":"e2e-rate-iso-a-6deefc","tenant":"e2e-shared-a-1badbb","userId":"154866f0-304f-46e2-8747-5c8d261c9839","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\",\"requestedSubscription\":\"e2e-rate-iso-a-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1badbb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"154866f0-304f-46e2-8747-5c8d261c9839","keyName":"e2e-rate-a-6deefc","selected_subscription":"e2e-rate-iso-a-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-a-1badbb/e2e-rate-iso-a-6deefc@ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1badbb/models/facebook/opt-125m","name":"rate-test-model-1badbb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6deefc","namespace":"ai-tenant-e2e-shared-a-1badbb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1badbb/rate-test-model-1badbb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9f77595-99d4-4863-a8f1-3bd076cb5b46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","method":"POST","path":"/ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557/v1/completions","host":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215094,"nanos":284866479},"http":{"id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","method":"POST","headers":{":authority":"e2e-shared-b-92c557.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MHLKUHZKaG5bj6yH_aFWMHn9YFWDgdt7wdYzOvUi7X37SqoLXa3ohYZnNgpV"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MHLKUHZKaG5bj6yH_aFWMHn9YFWDgdt7wdYzOvUi7X37SqoLXa3ohYZnNgpV\"}"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7197356c-f1ba-40a2-937a-02b5594d0517","keyName":"e2e-rate-b-6deefc","subscription":"e2e-rate-iso-b-6deefc","tenant":"e2e-shared-b-92c557","userId":"7197356c-f1ba-40a2-937a-02b5594d0517","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557\",\"requestedSubscription\":\"e2e-rate-iso-b-6deefc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-92c557.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m","name":"rate-test-model-92c557","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6deefc","namespace":"ai-tenant-e2e-shared-b-92c557","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557"}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6deefc"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7197356c-f1ba-40a2-937a-02b5594d0517","keyName":"e2e-rate-b-6deefc","selected_subscription":"e2e-rate-iso-b-6deefc","selected_subscription_key":"ai-tenant-e2e-shared-b-92c557/e2e-rate-iso-b-6deefc@ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-92c557/models/facebook/opt-125m","name":"rate-test-model-92c557","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6deefc","namespace":"ai-tenant-e2e-shared-b-92c557","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-92c557/rate-test-model-92c557"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297f5024-59cb-4063-a7b7-1ed1dec494a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18d7e0bf61c416c0459b42e95740458134ee13f954b65e8f5ef6a1652b5ed5f"}
{"level":"info","ts":"2026-07-28T05:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44e262c5602216a95346bd46281613ccf8f4c1ca73a88caa78d528379b14accb"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7099c1757c0a2b54dd3d11328fed9be631f5e52301848eae31640397842368"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5860cd81625d49166fecb92a60d987788627e0ae11a485e966cbd572ad59e878"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b36339b71d982fea8a734a0f938c4020b5a73de1a5e540da901bb90b9e630d30"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94eff5baf7094338abb5238062f7ee9981b9de348005302316eb9d086a3edf8e"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1360578a45ae050457787afdfd3d4d40497dbb864a14b5b7a5ac889d500700"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f3aa885a5fa589ad40025f1f18ded2c935b92f3aea49639ada8ad9f5c8ff27"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf14d932303793268f3c79ed08131d44ffad52d21b0243772bf6a90d5fbb3f5f"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7aae63da57803a17680b7cdf2f4a32929b898e72c13db90df53b6093111887f"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51113613ac66b835090de3f41bf36b71a47adbfa165a7a1976b05aa1cb8deffa"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbc61d13c10873f1992d0e726efe30fcca75e0e00f43ef1964c394f09da517f4"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50eb468358dcfde7377323477dcd79626c254ccda31ae45ae5492eab0d0ee198"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a2ad7625dcaf0c04bd7063876d8dbc8eda51fec5a090fbf3c41628e83d8e4e"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d52a407cddda382099b569e7f021857dc46c9cddb2b59bb4052c39f6a397ac3"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b1476b0a5493c069b36c67c90989af768e539699a09d3ab8dbfebfd49fabc8f"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c156c24e749412a655450c3271a2dbc7efc2bb0bc578c55f717a50700a4d75"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7de1f58f29c29c140a9c61f108b76fba266782f30e91d2798a695d763b132986"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/951f16f9f63044832fb7cca2f9efb5a7e8323b023615092ec930681fe96cb496"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59eb09c4032d9dec37404d14742acd7400f4c56d9cf31873d40c8461ef70b263"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283f817c9e4477203c25458c381a441f329ca2af86479315ae3ff4304f193aa4"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/600a82318ec3eaf929fc5123bcc64fd728da4845f8da3f4dcf038a88fd403d5e"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2e9b2c968d393933b38024553088b99f6f10e2269eb03c6785a64abbd1ed1d8"}
{"level":"info","ts":"2026-07-28T05:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/749a6477787d2709c5f366303c50be1fe5f53113f4b96f6380cae86f1ff4263e"}
{"level":"info","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58490","PortSpecifier":{"PortValue":58490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58490","PortSpecifier":{"PortValue":58490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215156,"nanos":905962931},"http":{"id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","method":"POST","headers":{":authority":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f18ba3a-63bd-4b07-9a96-421cc30e0abf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58492","PortSpecifier":{"PortValue":58492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149dcc33-18c1-473b-85fc-64a1137ff779","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58492","PortSpecifier":{"PortValue":58492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215156,"nanos":969635921},"http":{"id":"149dcc33-18c1-473b-85fc-64a1137ff779","method":"POST","headers":{":authority":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A12rXGo6DUTeHTQd_vf8drDyRwtUGHiYUN0kIKgylkoUAOVmAUrKstDUkdQa"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A12rXGo6DUTeHTQd_vf8drDyRwtUGHiYUN0kIKgylkoUAOVmAUrKstDUkdQa\"}"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"024ebf8c-58a5-40c9-9e6f-80f6f8dc871a","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"024ebf8c-58a5-40c9-9e6f-80f6f8dc871a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"024ebf8c-58a5-40c9-9e6f-80f6f8dc871a","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149dcc33-18c1-473b-85fc-64a1137ff779","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"debug","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"}
{"level":"info","ts":"2026-07-28T05:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T05:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T05:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"info","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.93:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3aa4addf-48b1-48e8-af90-5de0d6221036","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-dc1efb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.93:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215212,"nanos":365163601},"http":{"id":"3aa4addf-48b1-48e8-af90-5de0d6221036","method":"POST","headers":{":authority":"e2e-ipp-a-dc1efb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"]}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1047ba8bf1d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36cff924-3b00-4199-a9fb-56d9bf87c328"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6220b9a-f932-4104-9d94-f7ddcf1fc828","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.93:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-dc1efb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-dc1efb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aa4addf-48b1-48e8-af90-5de0d6221036","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd74cd63-b10a-4331-b231-f112f532c023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40324","PortSpecifier":{"PortValue":40324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.93:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd74cd63-b10a-4331-b231-f112f532c023","method":"POST","path":"/ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb/v1/chat/completions","host":"e2e-ipp-a-dc1efb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd74cd63-b10a-4331-b231-f112f532c023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40324","PortSpecifier":{"PortValue":40324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.93:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785215214,"nanos":429191538},"http":{"id":"cd74cd63-b10a-4331-b231-f112f532c023","method":"POST","headers":{":authority":"e2e-ipp-a-dc1efb.apps.4b968787-e1ff-4996-be24-1047ba8bf1d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C7pwhLJWoTPOTUN6_4lVdknPrqSy9cejjNZyG1iTPq5JBIeNtdoVFBEGkgsF"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-dc1efb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C7pwhLJWoTPOTUN6_4lVdknPrqSy9cejjNZyG1iTPq5JBIeNtdoVFBEGkgsF\"}"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-dc1efb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"872a7e6c-0030-430f-b610-88df78762725","keyName":"e2e-ipp-dc1efb","subscription":"ipp-route-dc1efb-sub","tenant":"e2e-ipp-a-dc1efb","userId":"872a7e6c-0030-430f-b610-88df78762725","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-dc1efb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb\",\"requestedSubscription\":\"ipp-route-dc1efb-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-dc1efb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-dc1efb/models/facebook/opt-125m","name":"ipp-route-dc1efb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-dc1efb-sub","namespace":"ai-tenant-e2e-ipp-a-dc1efb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb"}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd74cd63-b10a-4331-b231-f112f532c023","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-dc1efb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-dc1efb-sub"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74cd63-b10a-4331-b231-f112f532c023","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"872a7e6c-0030-430f-b610-88df78762725","keyName":"e2e-ipp-dc1efb","selected_subscription":"ipp-route-dc1efb-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb-sub@ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-dc1efb/models/facebook/opt-125m","name":"ipp-route-dc1efb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-dc1efb-sub","namespace":"ai-tenant-e2e-ipp-a-dc1efb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-dc1efb/ipp-route-dc1efb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd74cd63-b10a-4331-b231-f112f532c023","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T05:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd74cd63-b10a-4331-b231-f112f532c023","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4f105677adb6d24d95b24eb8ac4221664ffa268c9db7660b1afdbb881f262c5"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941d0249afb4adb352185deca07a0a1b7060fe727112c271fe3493bafdade285"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea0655c04c970c6e7ab0a4be396ca65ba43d4fae597a5c4175a4eec14ed988b9"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/019c72e5a19fbd5e80c74103229755773ab3ff967f73d59418a96cebeb31e259"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc05fdafad3dc7b24d485590d4a2b8ea838f050122d0e5a267a4835068dd3ef2"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18519e445f8ddabb9bac24a9b959714898baa53b665e22a79f80b1a044699c78"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/608ce3f20a3b67084b126ac5ac0847da296f174174e92f39318d1990bc1096ae"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6bcc45c7b1f4b87a0e7a36c92b9fd27e92a3d08251b86c64b656eac9aff72ca"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ff210100a25eae2fbb80e3ea3052c175d033b262db2822be0a877e1759ff86"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e4fda286cd2427522f272d9e4b13d0380bac860e3a2f0afe4effd546f635f6"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29f98beaf784330acdcd8a8d5e5786fb9804f6d99127b7d705a0058fd724160"}
{"level":"info","ts":"2026-07-28T05:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0b3be065eb20c0fbcb2f77a15d4b18c323a342bc1f5fb515fdc31ff93c0f438"}