{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"}
{"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"}
{"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}
{"level":"error","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47508","PortSpecifier":{"PortValue":47508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47508","PortSpecifier":{"PortValue":47508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":319025577},"http":{"id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f298d7-acef-4260-a6f9-637ac111422a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":385794593},"http":{"id":"b3f298d7-acef-4260-a6f9-637ac111422a","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":445100197},"http":{"id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50600","PortSpecifier":{"PortValue":50600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50600","PortSpecifier":{"PortValue":50600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577607,"nanos":533796910},"http":{"id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50610","PortSpecifier":{"PortValue":50610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25da62ea-879e-4546-99ca-37b6de70ad8c","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50610","PortSpecifier":{"PortValue":50610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577608,"nanos":579961505},"http":{"id":"25da62ea-879e-4546-99ca-37b6de70ad8c","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47608","PortSpecifier":{"PortValue":47608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47608","PortSpecifier":{"PortValue":47608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":471805907},"http":{"id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cde824e-6106-47dd-b132-05b85efa7418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32982","PortSpecifier":{"PortValue":32982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cde824e-6106-47dd-b132-05b85efa7418","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cde824e-6106-47dd-b132-05b85efa7418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32982","PortSpecifier":{"PortValue":32982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":512116504},"http":{"id":"4cde824e-6106-47dd-b132-05b85efa7418","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cde824e-6106-47dd-b132-05b85efa7418","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cde824e-6106-47dd-b132-05b85efa7418","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":549426160},"http":{"id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99547aef-b497-4031-91e7-969ea55ef558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99547aef-b497-4031-91e7-969ea55ef558","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99547aef-b497-4031-91e7-969ea55ef558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577622,"nanos":585818151},"http":{"id":"99547aef-b497-4031-91e7-969ea55ef558","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99547aef-b497-4031-91e7-969ea55ef558","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99547aef-b497-4031-91e7-969ea55ef558","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99547aef-b497-4031-91e7-969ea55ef558","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05db822a-8653-494a-a436-ce14d3ba9c14","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577623,"nanos":625116461},"http":{"id":"05db822a-8653-494a-a436-ce14d3ba9c14","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126093be-b569-4361-8bb9-943348e4aad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32988","PortSpecifier":{"PortValue":32988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"126093be-b569-4361-8bb9-943348e4aad3","method":"POST","path":"/ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8/v1/completions","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126093be-b569-4361-8bb9-943348e4aad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32988","PortSpecifier":{"PortValue":32988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577623,"nanos":658711243},"http":{"id":"126093be-b569-4361-8bb9-943348e4aad3","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zZLgALpAArewlmgJ_FNF9zccCPeF0XLXpq4XrdsMmTwHLFTf4BKkUBztHyKN"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zZLgALpAArewlmgJ_FNF9zccCPeF0XLXpq4XrdsMmTwHLFTf4BKkUBztHyKN\"}"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","keyName":"e2e-rate-b-11132d","subscription":"e2e-rate-iso-b-11132d","tenant":"e2e-shared-b-01f2d8","userId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\",\"requestedSubscription\":\"e2e-rate-iso-b-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01f2d8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11132d","namespace":"ai-tenant-e2e-shared-b-01f2d8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8"}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"126093be-b569-4361-8bb9-943348e4aad3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-11132d"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","keyName":"e2e-rate-b-11132d","selected_subscription":"e2e-rate-iso-b-11132d","selected_subscription_key":"ai-tenant-e2e-shared-b-01f2d8/e2e-rate-iso-b-11132d@ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01f2d8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11132d","namespace":"ai-tenant-e2e-shared-b-01f2d8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126093be-b569-4361-8bb9-943348e4aad3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126093be-b569-4361-8bb9-943348e4aad3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"}
{"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"}
{"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}