--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-21T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"error","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:43:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"error","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51030","PortSpecifier":{"PortValue":51030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51030","PortSpecifier":{"PortValue":51030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655826,"nanos":736152501},"http":{"id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8bd60-47bf-41a3-9884-c2f5cf39748b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48006","PortSpecifier":{"PortValue":48006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48006","PortSpecifier":{"PortValue":48006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655826,"nanos":770906459},"http":{"id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ba6434-f6e3-43c5-8308-bc4cbf4a6ed4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48008","PortSpecifier":{"PortValue":48008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48008","PortSpecifier":{"PortValue":48008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655826,"nanos":809420794},"http":{"id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","method":"GET","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bIOG6ntxtlexbhWP_cHvucPyrA9oLKktL262epz0FtqBQL5VILXwCrHFMcYD"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bIOG6ntxtlexbhWP_cHvucPyrA9oLKktL262epz0FtqBQL5VILXwCrHFMcYD\"}"}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-21T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5c5c1b-ba2d-48e3-a86b-20b2c0548b92","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"debug","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57298","PortSpecifier":{"PortValue":57298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57298","PortSpecifier":{"PortValue":57298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655843,"nanos":906284807},"http":{"id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b235ec2-d37c-4562-ae4e-6214651cfb22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46100","PortSpecifier":{"PortValue":46100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46100","PortSpecifier":{"PortValue":46100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655843,"nanos":937958248},"http":{"id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6a56df-6a12-4d54-8bf1-074cc65f73a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655843,"nanos":974874033},"http":{"id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d713dff-0ec6-46b6-8044-3a2ae9c4b689","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46116","PortSpecifier":{"PortValue":46116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b87ab34f-7546-4135-a803-4ff3575c01b6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46116","PortSpecifier":{"PortValue":46116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655844,"nanos":6917208},"http":{"id":"b87ab34f-7546-4135-a803-4ff3575c01b6","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b87ab34f-7546-4135-a803-4ff3575c01b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"error","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"error","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"error","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53313d78-62f3-4bca-87ec-f120583dddee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60128","PortSpecifier":{"PortValue":60128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53313d78-62f3-4bca-87ec-f120583dddee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53313d78-62f3-4bca-87ec-f120583dddee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60128","PortSpecifier":{"PortValue":60128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655862,"nanos":51450108},"http":{"id":"53313d78-62f3-4bca-87ec-f120583dddee","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53313d78-62f3-4bca-87ec-f120583dddee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53313d78-62f3-4bca-87ec-f120583dddee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53313d78-62f3-4bca-87ec-f120583dddee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53313d78-62f3-4bca-87ec-f120583dddee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53313d78-62f3-4bca-87ec-f120583dddee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34528","PortSpecifier":{"PortValue":34528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3501b187-5c5b-48ff-9279-fabac22cb558","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34528","PortSpecifier":{"PortValue":34528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655862,"nanos":86885353},"http":{"id":"3501b187-5c5b-48ff-9279-fabac22cb558","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3501b187-5c5b-48ff-9279-fabac22cb558","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34538","PortSpecifier":{"PortValue":34538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","method":"GET","path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34538","PortSpecifier":{"PortValue":34538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655862,"nanos":125430748},"http":{"id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","method":"GET","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a71ceb6-77b9-41e7-8c61-cad8c4cadd48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60130","PortSpecifier":{"PortValue":60130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","method":"GET","path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60130","PortSpecifier":{"PortValue":60130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655862,"nanos":153570509},"http":{"id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","method":"GET","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/825c06a7-5307-4554-8dbb-0d37b33cd719",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"154f9139-6e5e-4c41-9f2d-57e38d1a8cf4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"debug","ts":"2026-07-21T17:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"debug","ts":"2026-07-21T17:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"error","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"error","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"error","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"error","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:44:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655877,"nanos":312717758},"http":{"id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267ab6b9-c970-47a5-ae29-82c4819d6da4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53616","PortSpecifier":{"PortValue":53616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53616","PortSpecifier":{"PortValue":53616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655877,"nanos":347796311},"http":{"id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/auth-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e54fd1-d16d-49d5-8af9-b1b53d46b54e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42528","PortSpecifier":{"PortValue":42528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a88af224-de6f-44dc-a4d9-8356cc72853f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42528","PortSpecifier":{"PortValue":42528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655877,"nanos":398631135},"http":{"id":"a88af224-de6f-44dc-a4d9-8356cc72853f","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cuysCTRnIdc5J4mB_uj0HFyP7UchRqmLTXITBRQ5QlFzkxkopdVoDgPo0Kuu"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cuysCTRnIdc5J4mB_uj0HFyP7UchRqmLTXITBRQ5QlFzkxkopdVoDgPo0Kuu\"}"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7fba81ac-4242-4fc1-b882-8e67a3391670","keyName":"e2e-auth-iso-a-0b3a35","subscription":"e2e-auth-iso-6b8da8","tenant":"e2e-shared-a-6fedc9","userId":"7fba81ac-4242-4fc1-b882-8e67a3391670","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/auth-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6b8da8"}
{"level":"info","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:44:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a88af224-de6f-44dc-a4d9-8356cc72853f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db4ba29c41d11d076f3fe803a5886c70282d5e9f40a10a06ecaf7565ed9e86ed"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f80b1ba66a07d43fb95b832f2062c78a67927d503f27b7728684cc6f3fc4df3"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da38b416fd1a9d73234cbcef8df3a1437b229a4dd4175ea8cc1d1249d9f71699"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8def1546bd7f7f3aa333df29abcb0cbc525fcdf4defcceadc74f34ea2573b2"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a18e4df02aaad032beae7395a386ff8b76d8cb04cd55bb4c4e1656249f1c1f90"}
{"level":"info","ts":"2026-07-21T17:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afd0fb578c847fd79c32a64292ed7bef3b3916b3e41fc8ccaef283f68328f9e4"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38ca4a5ddfadc959fd559d25246aaf7fed1c0577d8b2b3fefbaf6393697ba0e"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5056bbf23a4da5dcccc935b65ac5d6275567b340cd2f428dbbfffb20bda956b"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a1313d235070cdb0d66ecb4cbe63fcbb456bb46267bbe635d19edb8113b8cf"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba85982623f2445eb1e5ec5633dab8bce1492893b7cc1e9b9266f27e2223fbb"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5af095014afd34114669e3685b1be2da6b647d2414143755d7c0b6c73e604b4d"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34dc7d4a334cdcc9e17bf48f0a4833636ecc709dee4f161b3a718dbb6d540f18"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82bea1ac00a0fe0478261b1129ccf7b60ae16980c46169b5e6126c866f1a23c"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca90dfcd3ccfef99f26effa17c4a763d9a6d661ac50ad8360b3875e27a46709"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48f8fa30aeb1b6339c4d21c77b0605a4d22476e9e760969b120cab3fc6b5e38"}
{"level":"info","ts":"2026-07-21T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fb8e1082be2a995b739dab73dcaa26c8b3122ac4e004c3751d61aaca241d5b"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138"}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"error","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"}
{"level":"info","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7"}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:45:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"}
{"level":"error","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655956,"nanos":392347175},"http":{"id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/sub-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1f85f6f-7989-4c55-8599-7b1ac1354d7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b71bd590-60c6-422d-95fd-ff924b137615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b71bd590-60c6-422d-95fd-ff924b137615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b71bd590-60c6-422d-95fd-ff924b137615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655956,"nanos":432416827},"http":{"id":"b71bd590-60c6-422d-95fd-ff924b137615","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b71bd590-60c6-422d-95fd-ff924b137615","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b71bd590-60c6-422d-95fd-ff924b137615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/sub-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b71bd590-60c6-422d-95fd-ff924b137615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b71bd590-60c6-422d-95fd-ff924b137615","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b71bd590-60c6-422d-95fd-ff924b137615","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655956,"nanos":472599533},"http":{"id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","method":"GET","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10QMxRx7HpALb0raH_GVKdFWj85qcqGZ7xwwUcisnXVJkEng78m6Ufn7Wnvly"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10QMxRx7HpALb0raH_GVKdFWj85qcqGZ7xwwUcisnXVJkEng78m6Ufn7Wnvly\"}"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9131739f-27a9-4c82-9879-153e0cc7d7c7","keyName":"e2e-sub-iso-f4366d","subscription":"e2e-a-only-d2e360","tenant":"e2e-shared-a-6fedc9","userId":"9131739f-27a9-4c82-9879-153e0cc7d7c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/sub-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d2e360"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b99dc0c9-45cd-49ba-9836-ae006ed47c38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56742","PortSpecifier":{"PortValue":56742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af89f243-3ab3-4338-a61e-03b185c1de1a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56742","PortSpecifier":{"PortValue":56742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655956,"nanos":516016418},"http":{"id":"af89f243-3ab3-4338-a61e-03b185c1de1a","method":"GET","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3CRBLtJ3Te3ZzFPO_1GWVk3yHw75qX82G3pg9STAIzewSYffHwPCi76U0deE"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3CRBLtJ3Te3ZzFPO_1GWVk3yHw75qX82G3pg9STAIzewSYffHwPCi76U0deE\"}"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4572dfa-ddb4-4726-aa54-69e46cd079c2","keyName":"e2e-sub-iso-2aa888","subscription":"e2e-b-only-d2e360","tenant":"e2e-shared-b-5a36a6","userId":"a4572dfa-ddb4-4726-aa54-69e46cd079c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/sub-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d2e360"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af89f243-3ab3-4338-a61e-03b185c1de1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37170","PortSpecifier":{"PortValue":37170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37170","PortSpecifier":{"PortValue":37170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655974,"nanos":901243881},"http":{"id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/sub-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1723017-ace5-4c7d-94d6-e09e0219ad8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54822","PortSpecifier":{"PortValue":54822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54822","PortSpecifier":{"PortValue":54822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655974,"nanos":943011724},"http":{"id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/sub-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67181c9e-c9e8-42e7-a0f5-780e652fb88a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37174","PortSpecifier":{"PortValue":37174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37174","PortSpecifier":{"PortValue":37174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655974,"nanos":977653547},"http":{"id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w2XuGvaDtol7AUOJ_WU6Ga2S41p2xF14Ojud75gQqgOY9plq042RbZx9njQk"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w2XuGvaDtol7AUOJ_WU6Ga2S41p2xF14Ojud75gQqgOY9plq042RbZx9njQk\"}"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2761baa-ee64-4898-9fdd-e6b4de92a01b","keyName":"e2e-sub-iso-4ffe40","subscription":"e2e-shared-sub-a5f562","tenant":"e2e-shared-a-6fedc9","userId":"d2761baa-ee64-4898-9fdd-e6b4de92a01b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/sub-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a5f562"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:46:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7da977-6ce2-4545-bf2f-763bfb149b53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54832","PortSpecifier":{"PortValue":54832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45d7ba29-af43-4935-a6d1-a9436822a68f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54832","PortSpecifier":{"PortValue":54832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784655975,"nanos":8505805},"http":{"id":"45d7ba29-af43-4935-a6d1-a9436822a68f","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-N1DP8QcYg25A7InH_bjAUl8dSAMVvYwGV7UvVWGHe6pTQcrDFC7aRLbaLyWb"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-N1DP8QcYg25A7InH_bjAUl8dSAMVvYwGV7UvVWGHe6pTQcrDFC7aRLbaLyWb\"}"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b5467b5-ec84-46dd-a9ac-698ae3cc2190","keyName":"e2e-sub-iso-a2d3d2","subscription":"e2e-shared-sub-a5f562","tenant":"e2e-shared-b-5a36a6","userId":"4b5467b5-ec84-46dd-a9ac-698ae3cc2190","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/sub-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a5f562"}
{"level":"info","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:46:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d7ba29-af43-4935-a6d1-a9436822a68f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48a4e9264bfd809ba3ebefef2a7b4bc11f4a7d350ac60533207890279bab002d"}
{"level":"info","ts":"2026-07-21T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e83f80d86dcb277a25fe239bc1373a53c896bfa304fa87c77de9b4cbd7a2c6dd"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54af1077828df1b71bc6ff693178950b008099b5b0eb19b774669bb7a1502298"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a1c0f1f6d47a6ca4a157f55fe453191a3d321dbbb99d0074a49a74742cbe480"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976c0ee1037bb221cf4a4f900ed8413fb24132d7b57854ffb451e2f279a67673"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/850e9431cecd942190db8c0d59c4f468c1ef95af66aaa95efeffe9f75017d699"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7379a748a1f237b0e669bb1542df24185f3db8425433be130ec20fed75184b2"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3610fe1aa351d2cb35b60564fa5862948389da37ed5e8e50c239ae7c53206a9"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a970dd8d8401be550d9c714f41b8a6900aa4a2c3bb2f6a9ab71a5afa6007138"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb8c5c932475e2bf25676d307b34e7936098dc45071fa721700438352a78713e"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7273ebe9bb9302a169344351d80e4b1ec47d68b3d499c3ff8fdb5566afa00c"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2b0754baec4c69592bc1429913f2fef3caf09dc4dddd25308a949c289c4774a"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef4454e23534b066f62df48f91e1741598fd8457b58f79dd1b11933b449e464a"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1b795e81b7ab495ad336c1c1d2cd4f9b5423251a87a4c73f23c84b2a0cdb6f7"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d55aff93142c3d606ff5db655b6265fe5700caf22fb37aa7283081ed66186e43"}
{"level":"info","ts":"2026-07-21T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400347fc31a6629318ee102f42a58572fb1fda091da2128bec7b5aadd1c8fdcb"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4"}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"error","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48766","PortSpecifier":{"PortValue":48766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48766","PortSpecifier":{"PortValue":48766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656033,"nanos":160103592},"http":{"id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05870ff5-fbcc-4ac1-961d-932a01bf0972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60696","PortSpecifier":{"PortValue":60696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60696","PortSpecifier":{"PortValue":60696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656033,"nanos":204084069},"http":{"id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b5be472-b7cb-420f-8edc-b2b8ad74d51c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656033,"nanos":243193539},"http":{"id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz\"}"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","subscription":"e2e-rate-iso-a-eb650d","tenant":"e2e-shared-a-6fedc9","userId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-eb650d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb650d"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","selected_subscription":"e2e-rate-iso-a-eb650d","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-eb650d@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69fef36-97f2-4b50-b7a7-d21be049a8ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48786","PortSpecifier":{"PortValue":48786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48786","PortSpecifier":{"PortValue":48786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656034,"nanos":294968090},"http":{"id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz\"}"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","subscription":"e2e-rate-iso-a-eb650d","tenant":"e2e-shared-a-6fedc9","userId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-eb650d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb650d"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","selected_subscription":"e2e-rate-iso-a-eb650d","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-eb650d@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1577ace-3a74-4b40-8b3a-1ecc8c26ab5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42036","PortSpecifier":{"PortValue":42036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42036","PortSpecifier":{"PortValue":42036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656035,"nanos":330783780},"http":{"id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-otDtuE05sZQUrMuh_S1OtvxNeoAP9e7KsMrJfLmJRB6yqjNJOgGbJ0bZ3twz\"}"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","subscription":"e2e-rate-iso-a-eb650d","tenant":"e2e-shared-a-6fedc9","userId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-eb650d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb650d"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79be0cea-7a02-4f65-9ec4-79341d2086d3","keyName":"e2e-rate-a-eb650d","selected_subscription":"e2e-rate-iso-a-eb650d","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-eb650d@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb650d","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab0ad26-890c-45ee-a00a-546312b5ed51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6924d537-a868-4e56-a1e6-ee85322762c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656042,"nanos":21647058},"http":{"id":"6924d537-a868-4e56-a1e6-ee85322762c4","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6924d537-a868-4e56-a1e6-ee85322762c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc847923-625f-4c5b-a82d-df5eaaa98440","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656042,"nanos":57288282},"http":{"id":"cc847923-625f-4c5b-a82d-df5eaaa98440","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"]}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4e77e04a47aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=52378790-3435-4cc3-9ce5-0ef2c2f4ebb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7dff930-8b3e-4866-94c2-35a9f09372f2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc847923-625f-4c5b-a82d-df5eaaa98440","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42042","PortSpecifier":{"PortValue":42042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42042","PortSpecifier":{"PortValue":42042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656042,"nanos":96186886},"http":{"id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe1d15d-dc91-4cfa-9585-95bcb6501895","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42044","PortSpecifier":{"PortValue":42044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42044","PortSpecifier":{"PortValue":42044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656043,"nanos":130946085},"http":{"id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc6c7cc-7c05-4e09-b481-caf80fdf64c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656044,"nanos":174271319},"http":{"id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66ff5fa-1485-4644-8d23-edeaa3c7cecb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59028","PortSpecifier":{"PortValue":59028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59028","PortSpecifier":{"PortValue":59028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656045,"nanos":207911583},"http":{"id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b2ff7be-13d7-4fe0-bec6-be26a78fa155","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59044","PortSpecifier":{"PortValue":59044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59044","PortSpecifier":{"PortValue":59044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656046,"nanos":246486967},"http":{"id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53ebd162-2819-4e39-9228-5afcbfd5a41e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656047,"nanos":281450578},"http":{"id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b0bc89-f0bf-4265-8b0c-55a6a7787a83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836a73f4-4c8b-437d-881c-396c75d64193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59066","PortSpecifier":{"PortValue":59066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"836a73f4-4c8b-437d-881c-396c75d64193","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836a73f4-4c8b-437d-881c-396c75d64193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59066","PortSpecifier":{"PortValue":59066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656048,"nanos":315256544},"http":{"id":"836a73f4-4c8b-437d-881c-396c75d64193","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"836a73f4-4c8b-437d-881c-396c75d64193","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836a73f4-4c8b-437d-881c-396c75d64193","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836a73f4-4c8b-437d-881c-396c75d64193","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836a73f4-4c8b-437d-881c-396c75d64193","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59078","PortSpecifier":{"PortValue":59078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59078","PortSpecifier":{"PortValue":59078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656049,"nanos":351343643},"http":{"id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2183a930-d675-41c5-9c9a-f4b0c6d25709","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59088","PortSpecifier":{"PortValue":59088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59088","PortSpecifier":{"PortValue":59088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656050,"nanos":384643930},"http":{"id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc0b52-80b8-4f3e-bd34-120a6e5a5cc3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59096","PortSpecifier":{"PortValue":59096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59096","PortSpecifier":{"PortValue":59096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656051,"nanos":423754316},"http":{"id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce1fb9a-77fc-445a-aa54-f7b054a405cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","method":"POST","path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions","host":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656052,"nanos":461072012},"http":{"id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","method":"POST","headers":{":authority":"e2e-shared-a-6fedc9.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CPFbSZ7VxSR3c5Si_iDdhRTulNxZbI4acwVrcALxNLqvYwLg4zf6E1xrKqBG\"}"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","subscription":"e2e-rate-iso-a-128fbe","tenant":"e2e-shared-a-6fedc9","userId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\",\"requestedSubscription\":\"e2e-rate-iso-a-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6fedc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6fedc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48edb6eb-8dd9-4eaa-b41c-cb3cec704293","keyName":"e2e-rate-a-128fbe","selected_subscription":"e2e-rate-iso-a-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-a-6fedc9/e2e-rate-iso-a-128fbe@ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6fedc9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-128fbe","namespace":"ai-tenant-e2e-shared-a-6fedc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6fedc9/rate-test-model-6fedc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ab3459e-740f-9ff0-8c3f-9065f732c84f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46194","PortSpecifier":{"PortValue":46194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9dd60d1-2394-41bb-bb87-530cc7778542","method":"POST","path":"/ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6/v1/completions","host":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46194","PortSpecifier":{"PortValue":46194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784656052,"nanos":496764866},"http":{"id":"d9dd60d1-2394-41bb-bb87-530cc7778542","method":"POST","headers":{":authority":"e2e-shared-b-5a36a6.apps.100e5263-5aea-49a1-b78d-4e77e04a47aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-120Pm3NjmkLG4VJnj_vyMYjUF4h743ZjnJDOZR3vFMcfSdouUU4rpPSfYULQl"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-120Pm3NjmkLG4VJnj_vyMYjUF4h743ZjnJDOZR3vFMcfSdouUU4rpPSfYULQl\"}"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ba54639-d042-44ac-817d-31297e950a5f","keyName":"e2e-rate-b-128fbe","subscription":"e2e-rate-iso-b-128fbe","tenant":"e2e-shared-b-5a36a6","userId":"1ba54639-d042-44ac-817d-31297e950a5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6\",\"requestedSubscription\":\"e2e-rate-iso-b-128fbe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a36a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5a36a6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-128fbe","namespace":"ai-tenant-e2e-shared-b-5a36a6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6"}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a36a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-128fbe"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1ba54639-d042-44ac-817d-31297e950a5f","keyName":"e2e-rate-b-128fbe","selected_subscription":"e2e-rate-iso-b-128fbe","selected_subscription_key":"ai-tenant-e2e-shared-b-5a36a6/e2e-rate-iso-b-128fbe@ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5a36a6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-128fbe","namespace":"ai-tenant-e2e-shared-b-5a36a6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5a36a6/rate-test-model-5a36a6"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T17:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9dd60d1-2394-41bb-bb87-530cc7778542","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b84bf956fa6e7b565ba00271da322e0345b06f89df9b58c75e12baf7c761c8b7"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce9ae44560d24872155b0c11f5bba1a2c9e9ff61413a664817d56dca9260fb39"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ca5cbe75d89f2d8f9d90b980a6cf979923041133e23d843747d0a7514883514"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72fcb6314b0ce63404ef0bc1b7fccc688aa12f2a8c5a5d3e9ea339d9091c3fed"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6feda21c0fc67e06fb2e22d8f0e81be19d00adbb8ca121fb8f5dda549f5bcce1"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867845942b8252f5d8d26e1f797c23e0963cc72c48b68848e386d7fdb1b5f718"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/102db7ad381949ac93de24eccb1546ce9ff7462b2e3b2b28aeaa90984ac95163"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e8382d9c666dd5d6bba7c2b267290c2ccf91932deb8399384764e9593db72"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af420a243cfaf94da91cd999a7327a5799f6e0e43264cf7595bbd9e6ca64c9b"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb3c8628ab15f2b141d16b8aab7ae18a962158110f58fb5eb52b5a59507307c"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4947733f8c75cb2be93a36747a15df889686c15a18db4494da3a99a80e465a7f"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3c13449cd218695c978de67f0b60951d42ecaed24c76534e69f5e6555d0c53"}
{"level":"info","ts":"2026-07-21T17:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/477340e14eaf095def8aa0f3ad9dce54536e1c6cb053a17c1478ab314d8cf56a"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0705fdb04ae3706a2ce86046daca0e5b73bcf99db56077b0c07a7dd4aab4fe4"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226747967f1ad1ee678f5f39ec57b02e54817cf91b2f4131cfdcea96b36016ce"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fde31eba84988e43411761b1438fb254423980b27e0d413a129891c7bd59475"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/209eeaa6b94ebc188acacd1f7603ab3c6648071d769fb67e0119657ec2701700"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d2fb8f5b0afc9bc0f35c8c146d1da07b07bbae7072b20fab84257e11a0f100"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baac29086d8369ca9c79ed73040e1230091a3e0d3d8037699075b6ac58b38198"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4a2fa2b07b60d4f6a5f83789f2c3633987d0e3dea301685b498ce57c95bfcc4"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/596067d9605c0f72d97e8a12b26266d2c946aa4f861e9a501fe219fe7a909c25"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e923fcacf42aa4eb720db3829fe7aa5c5dba3a734e43052073cba3fcfb64f8"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee3eae7f4f990ad9ad916e25b1634b5713cf96699a46684e4acd478f3fcb0ff2"}
{"level":"info","ts":"2026-07-21T17:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e72c9b61a2b6c6b8c3b1c7d62dcf9bf7268c91a732291703a662ea28d273d041"}