--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330"}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330"}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330"}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82"}
{"level":"info","ts":"2026-07-08T21:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0"}
{"level":"error","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4"}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:42:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0"}
{"level":"info","ts":"2026-07-08T21:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4"}
{"level":"info","ts":"2026-07-08T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/012c8f32dfe5f56ae6a981cf067c5b5ee7b7bfa0231886412a5da28a58eb25ff"}
{"level":"info","ts":"2026-07-08T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d5eae6deada607ea1d984fa90e4fd1bec931deecdda95762107b7a806a19f82"}
{"level":"info","ts":"2026-07-08T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d528fac5eb2763d182c8a040ce23578a4db5bb7a2f016ee0929eac54b63909a0"}
{"level":"info","ts":"2026-07-08T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce21d57cd58ace1eab45df4fe6baa714c02eb8b3b87f6a4e5655a8c50cddf330"}
{"level":"info","ts":"2026-07-08T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daa390bfd59d49d00301d06761f1751ce03581b1ca9aeaae4e997c42f4eccdf0"}
{"level":"info","ts":"2026-07-08T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1508963154ab830b4eb4317461cd96d7127a0d10842c342c7762ab8623c3101"}
{"level":"info","ts":"2026-07-08T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cd6726cba6a11e67520a790663394aa4df73124f75d235867ae74ef93d044b4"}
{"level":"info","ts":"2026-07-08T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76a3c2206673e0174b97520777a821422a4eb26404ba2175642834a4465ac8b4"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"error","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"info","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"error","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"}
{"level":"error","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547059,"nanos":166796107},"http":{"id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbb2ad38-ff78-415b-8db1-1a4a2efb36bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42808","PortSpecifier":{"PortValue":42808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42808","PortSpecifier":{"PortValue":42808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547059,"nanos":229686893},"http":{"id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"746a41ff-efa3-4a6f-94d7-0517bc7953f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","method":"GET","path":"/maas-api/v1/api-keys/6fda59eb-5cab-4368-a78a-3fb73ce8794e","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547059,"nanos":314982673},"http":{"id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","method":"GET","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6fda59eb-5cab-4368-a78a-3fb73ce8794e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6fda59eb-5cab-4368-a78a-3fb73ce8794e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d049c4-0b3e-4f9a-ac5e-0c48480cf2d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42820","PortSpecifier":{"PortValue":42820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","method":"GET","path":"/maas-api/v1/api-keys/cc67d79f-385e-440c-87d3-e12dc56f15ad","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42820","PortSpecifier":{"PortValue":42820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547059,"nanos":354380455},"http":{"id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","method":"GET","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc67d79f-385e-440c-87d3-e12dc56f15ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc67d79f-385e-440c-87d3-e12dc56f15ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b153f0-d2bd-40bb-a4ae-4e62aab22092","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547074,"nanos":550499823},"http":{"id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01fc372b-14c5-43dd-bce8-fcca3f4a1067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35030","PortSpecifier":{"PortValue":35030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35030","PortSpecifier":{"PortValue":35030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547074,"nanos":586090422},"http":{"id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b95eb443-0f9f-4108-9c76-6a1911dbd11b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57000","PortSpecifier":{"PortValue":57000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57000","PortSpecifier":{"PortValue":57000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547074,"nanos":628764561},"http":{"id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","method":"GET","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pdfMjGSLSmi8sWCc_E2uVuuwwAJl6ONxEMkzzlJWVQrxqR3WCfOhDCaa89br"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pdfMjGSLSmi8sWCc_E2uVuuwwAJl6ONxEMkzzlJWVQrxqR3WCfOhDCaa89br\"}"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"edd5f14c-6387-41dc-b43f-466c0de849c3","keyName":"e2e-auth-iso-a-a9e13f","subscription":"e2e-auth-iso-f28408","tenant":"e2e-shared-a-fbb91c","userId":"edd5f14c-6387-41dc-b43f-466c0de849c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f28408"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05af47ed-70b3-4f97-9b6a-dfafa1eacb9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fd93c9d-633c-4a34-a05c-8812d413184a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547091,"nanos":977990647},"http":{"id":"2fd93c9d-633c-4a34-a05c-8812d413184a","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fd93c9d-633c-4a34-a05c-8812d413184a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78167391-0545-4768-90ea-4a0304b7413a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45364","PortSpecifier":{"PortValue":45364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78167391-0545-4768-90ea-4a0304b7413a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78167391-0545-4768-90ea-4a0304b7413a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45364","PortSpecifier":{"PortValue":45364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547092,"nanos":15229449},"http":{"id":"78167391-0545-4768-90ea-4a0304b7413a","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78167391-0545-4768-90ea-4a0304b7413a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78167391-0545-4768-90ea-4a0304b7413a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78167391-0545-4768-90ea-4a0304b7413a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78167391-0545-4768-90ea-4a0304b7413a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78167391-0545-4768-90ea-4a0304b7413a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45370","PortSpecifier":{"PortValue":45370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45370","PortSpecifier":{"PortValue":45370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547092,"nanos":56362910},"http":{"id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","method":"GET","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HV3dEboLl36LHqHG_ANN5DZfXgIMIGSDhPiwwRQknoPPWyWvHR6WAbMkmtSc"}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HV3dEboLl36LHqHG_ANN5DZfXgIMIGSDhPiwwRQknoPPWyWvHR6WAbMkmtSc\"}"}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-08T21:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb21cc9b-a6ed-434d-8a7f-6646eb372282","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d664fc32-fa36-40b6-b479-58b573af26ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547109,"nanos":397817796},"http":{"id":"d664fc32-fa36-40b6-b479-58b573af26ec","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d664fc32-fa36-40b6-b479-58b573af26ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60662","PortSpecifier":{"PortValue":60662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60662","PortSpecifier":{"PortValue":60662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547109,"nanos":436511079},"http":{"id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8eda27-3648-4831-9f54-6eaaa99ba380","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42272","PortSpecifier":{"PortValue":42272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42272","PortSpecifier":{"PortValue":42272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547109,"nanos":474660011},"http":{"id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f25243f-456f-4d3d-b3e8-087e5ffb1f12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60668","PortSpecifier":{"PortValue":60668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60668","PortSpecifier":{"PortValue":60668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547109,"nanos":512493278},"http":{"id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e56b7b50-8200-4e6f-81c9-91ea6629bc51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37938","PortSpecifier":{"PortValue":37938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37938","PortSpecifier":{"PortValue":37938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547125,"nanos":638907817},"http":{"id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6c3841-8c6b-4a43-ad1a-fe9a5e23110a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53740","PortSpecifier":{"PortValue":53740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53740","PortSpecifier":{"PortValue":53740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547125,"nanos":675371969},"http":{"id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a0a5058-7189-4b16-92c1-b074cbb2e1f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53754","PortSpecifier":{"PortValue":53754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","method":"GET","path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53754","PortSpecifier":{"PortValue":53754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547125,"nanos":711057837},"http":{"id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","method":"GET","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2944145-4cdc-4d82-bc89-1b9fd61dc0d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37942","PortSpecifier":{"PortValue":37942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","method":"GET","path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37942","PortSpecifier":{"PortValue":37942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547125,"nanos":746274016},"http":{"id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","method":"GET","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7af63bc-17bb-4578-b9f6-5a8a5ddaa029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"844d4ee5-823f-42bb-a7ae-ffa3fd05eb97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38824","PortSpecifier":{"PortValue":38824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38824","PortSpecifier":{"PortValue":38824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547143,"nanos":248246103},"http":{"id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dffa030-7b85-49fc-9f53-38d8ef056d8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36756","PortSpecifier":{"PortValue":36756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36756","PortSpecifier":{"PortValue":36756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547143,"nanos":282690908},"http":{"id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/auth-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5766b2-0306-4cd8-91fa-ee54c6920e06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38832","PortSpecifier":{"PortValue":38832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38832","PortSpecifier":{"PortValue":38832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547143,"nanos":323324967},"http":{"id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t3ABMN0t8nMHUWeR_6OyWN17QCRAWCiT0qjaC0WqNiWMgbZBuxjvm8tgw9tf"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t3ABMN0t8nMHUWeR_6OyWN17QCRAWCiT0qjaC0WqNiWMgbZBuxjvm8tgw9tf\"}"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2790327-7673-487d-b934-971b8ed1c3d1","keyName":"e2e-auth-iso-a-72d4fc","subscription":"e2e-auth-iso-5acd60","tenant":"e2e-shared-a-fbb91c","userId":"a2790327-7673-487d-b934-971b8ed1c3d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/auth-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5acd60"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ff03ae-d7cb-4b0f-8364-1d6fa19e4840","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa9687888bd3f06d3c1d7010fbdc65dc7069766b015e882fbd6bc923a356eb3c"}
{"level":"info","ts":"2026-07-08T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdfcbfe04e5bc5cec2f99755ce5bf00c1bd63c4a580239e1ae093aa439a2dd56"}
{"level":"info","ts":"2026-07-08T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd2b1ed23c1f778921a0c4fe6b8bc05385926dcf03f145392ea2804f958e320"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e73db070538a9926389da7cdc1dbd11e943812f51f5bc9769a9876c24b4136ce"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/805cda401ef11d274ddd6803c6114ad3b3a4a9c9a9930001396a8327d1e0fec8"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad608d8dfeecf2ddeaa04f01610b23a4af5a5ff0eb8560ee11dd1697f643aa0a"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22a8b38a9882ba76588c81362bee7e4b64becc38707eb04da14efb2e2c75903"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b8a18bf46abe1a257d05c145a2262df4587f90f4d1fa2af8e7e9026e941041"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52dae4c25f4f35a7d3dac6b5d3993ac17c3faf067b879b5264c31828ae47743a"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d50d12821c789e2e29cfe42ad3e918ad7ccf0a8f313c8ea8246bd3478e76c96c"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc40b1d611e8d534388cc1fc5d936428ae73550a526df413cb44e5bcb6b72dcd"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/928be147e8bcce51c1290348423bd58ef8d0cbbe542e924557978129ad6b8d5c"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93577bc16c0d4346d75c5cf78797c1fa5fbdffb4dafa8137cb3d8ee23af74d74"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a643d74dae3e9bcaf0e194efe9fc144c4826beb944e40712b443287b1e816cae"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3824bb68ab6d98116d53a33b525191941ee07108322ed3d736a269cf60f13b63"}
{"level":"info","ts":"2026-07-08T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7734c2fdb94f8c605449ca4b1fe19e0f5092aa8bcc5716c0e2cbf5d63194d8"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:45:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"debug","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"debug","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"}
{"level":"info","ts":"2026-07-08T21:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"debug","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"}
{"level":"info","ts":"2026-07-08T21:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547252,"nanos":605322472},"http":{"id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/sub-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20325732-df1b-95c1-86c2-25a6c3f8aaca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42448","PortSpecifier":{"PortValue":42448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"810f4675-e64e-4d84-8baa-788cce32b9ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42448","PortSpecifier":{"PortValue":42448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547252,"nanos":646795563},"http":{"id":"810f4675-e64e-4d84-8baa-788cce32b9ea","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/sub-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"810f4675-e64e-4d84-8baa-788cce32b9ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16784a8a-b1b1-4790-a234-48fb87791f16","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547252,"nanos":688576302},"http":{"id":"16784a8a-b1b1-4790-a234-48fb87791f16","method":"GET","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VhUMwOs7qlpBCfjk_Bep6spa3kr1NUzMa2Y3IsoFFn4UhxRff1SrGiZk15D7"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VhUMwOs7qlpBCfjk_Bep6spa3kr1NUzMa2Y3IsoFFn4UhxRff1SrGiZk15D7\"}"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44c65544-64ab-4994-835b-73f1123ab989","keyName":"e2e-sub-iso-7bc1af","subscription":"e2e-a-only-0705cc","tenant":"e2e-shared-a-fbb91c","userId":"44c65544-64ab-4994-835b-73f1123ab989","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/sub-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0705cc"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16784a8a-b1b1-4790-a234-48fb87791f16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42456","PortSpecifier":{"PortValue":42456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42456","PortSpecifier":{"PortValue":42456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547252,"nanos":729178802},"http":{"id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","method":"GET","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZlmqrHUd2SZLRtun_iEOz7FNd8JZLSrgUtjXakeHwasjThe67g648GdKSjb6"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZlmqrHUd2SZLRtun_iEOz7FNd8JZLSrgUtjXakeHwasjThe67g648GdKSjb6\"}"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd33cfd9-47fa-4f97-a727-0fc197fc4920","keyName":"e2e-sub-iso-ada843","subscription":"e2e-b-only-0705cc","tenant":"e2e-shared-b-6edaf8","userId":"cd33cfd9-47fa-4f97-a727-0fc197fc4920","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/sub-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0705cc"}
{"level":"info","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6aee501-c1bc-48f9-9b41-f7f5e9d4e04e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d268e1e3-34e6-405a-87f2-8772d2771463","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547271,"nanos":560399034},"http":{"id":"d268e1e3-34e6-405a-87f2-8772d2771463","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/sub-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d268e1e3-34e6-405a-87f2-8772d2771463","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47352","PortSpecifier":{"PortValue":47352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d685a93d-542d-4af6-854b-d18e03ab796f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47352","PortSpecifier":{"PortValue":47352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547271,"nanos":597056972},"http":{"id":"d685a93d-542d-4af6-854b-d18e03ab796f","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/sub-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d685a93d-542d-4af6-854b-d18e03ab796f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5016af0d-fe99-4bed-a727-197c1c483074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55498","PortSpecifier":{"PortValue":55498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5016af0d-fe99-4bed-a727-197c1c483074","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5016af0d-fe99-4bed-a727-197c1c483074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55498","PortSpecifier":{"PortValue":55498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547271,"nanos":632780563},"http":{"id":"5016af0d-fe99-4bed-a727-197c1c483074","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YaOXVfEHjZYR0uft_xVc65yYSELcrO2L9v2K480KwbrWyMKCTRgELjAREq5m"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YaOXVfEHjZYR0uft_xVc65yYSELcrO2L9v2K480KwbrWyMKCTRgELjAREq5m\"}"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9738eaf0-996f-41dd-8c40-55c768349732","keyName":"e2e-sub-iso-aea586","subscription":"e2e-shared-sub-b85333","tenant":"e2e-shared-a-fbb91c","userId":"9738eaf0-996f-41dd-8c40-55c768349732","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5016af0d-fe99-4bed-a727-197c1c483074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/sub-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b85333"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5016af0d-fe99-4bed-a727-197c1c483074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5016af0d-fe99-4bed-a727-197c1c483074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5016af0d-fe99-4bed-a727-197c1c483074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47368","PortSpecifier":{"PortValue":47368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47368","PortSpecifier":{"PortValue":47368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547271,"nanos":665209546},"http":{"id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WdnFtiBxCdqpt84d_fO2SuZnv8p0WujbgukmcTn63lWsdEewNJXvOar7r4Hf"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WdnFtiBxCdqpt84d_fO2SuZnv8p0WujbgukmcTn63lWsdEewNJXvOar7r4Hf\"}"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae772b33-25ca-427c-a324-49a96b328331","keyName":"e2e-sub-iso-bac9b6","subscription":"e2e-shared-sub-b85333","tenant":"e2e-shared-b-6edaf8","userId":"ae772b33-25ca-427c-a324-49a96b328331","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/sub-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b85333"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed147ea5-9cef-4dee-80a8-c77d3afa760f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89525b1880c8bc955f81beb3cc108a0ea858a0f151c6dff400411d0ef2c29791"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7912be996f3d1c0d30e020feefbf3a91f577273eb8407ddd74f0a90d3c4666a"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef5aa85214df7bd01e8ec9cad81d8fd3fc8bca1d98c1fef268cb2f076357f9d0"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/985f805aca811f804159b43ae37024664e592fc6bb938bc985e36b1ab004aa3f"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32cfd79746842686ddf0a194fecdebb36b2325085b279bca4c0892010bd21587"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/657e1317608bd68242b5b89dbb9ecd1bc759ed005507e830060c50fbd23d5cbe"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6621e674ab2712f76d560b7765d8b2580f3b9a967a84f1a523ea3767702f35a"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53c3ef21dc686480b69deb82c4f30922392abde143a52c92c203cf15a1296233"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f65aadca38f7354913fe28f2e1c4ae66ba1e0046035cf1923e29d4b91bad85b"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e7bf7a6384370dc8e95735c948de871fbd50a4969139ac407f56b8b1de0b4c7"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67f253e2327dcce093082ba4f8e9eda6c21b567cbe03da7820b0e00c9650cc6"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f230096e81e3df3a949fdfae2220ed80f259acf0847d90bedf47c91d7330c03"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9280770be49455aa3355095d80271a5793abd305551c1ec672009f538a3ffded"}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b49c7240174dba0d6f3d1b43d416bf45a5de28746d701b1f6c52c1316e130a"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fd25d7e7d1c23d71997715a7a2064bd39a8ca8a4fa7910871f028de7c1d2605"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d71bfd767801052b463a1ad137236bb4ef1ccf841ef7f938afa7bba5fea7292a"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"info","ts":"2026-07-08T21:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T21:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"}
{"level":"debug","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"info","ts":"2026-07-08T21:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547329,"nanos":538534635},"http":{"id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0c52026-8bf8-4be8-82dc-3cfb618c4d9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45406","PortSpecifier":{"PortValue":45406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45406","PortSpecifier":{"PortValue":45406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547329,"nanos":581712102},"http":{"id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd86255c-df43-431a-bac3-c4c5878ff7eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547329,"nanos":625300393},"http":{"id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN\"}"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","subscription":"e2e-rate-iso-a-581023","tenant":"e2e-shared-a-fbb91c","userId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-581023\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-581023"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","selected_subscription":"e2e-rate-iso-a-581023","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-581023@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5c5717-343b-4018-bece-c1d1b8e7d4ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37802","PortSpecifier":{"PortValue":37802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37802","PortSpecifier":{"PortValue":37802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547330,"nanos":682359603},"http":{"id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN\"}"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","subscription":"e2e-rate-iso-a-581023","tenant":"e2e-shared-a-fbb91c","userId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-581023\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-581023"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","selected_subscription":"e2e-rate-iso-a-581023","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-581023@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12198ac7-69e3-4e57-a21b-1b3525a0f044","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37816","PortSpecifier":{"PortValue":37816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37816","PortSpecifier":{"PortValue":37816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547331,"nanos":723608583},"http":{"id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R0DMlRLQ8TKbzTOU_RJxMEakgR9SQeHql3WTpIOm92KouLZHLMKw2vWzyjWN\"}"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","subscription":"e2e-rate-iso-a-581023","tenant":"e2e-shared-a-fbb91c","userId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-581023\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-581023"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8df301e8-4f76-48ae-b1c8-146c1d3ddb49","keyName":"e2e-rate-a-581023","selected_subscription":"e2e-rate-iso-a-581023","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-581023@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-581023","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1baf064e-eb5b-47a5-90b2-cc1a5b4288f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49266","PortSpecifier":{"PortValue":49266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4005ef96-d160-4b79-808e-fa9373f702f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49266","PortSpecifier":{"PortValue":49266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547349,"nanos":947651904},"http":{"id":"4005ef96-d160-4b79-808e-fa9373f702f7","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005ef96-d160-4b79-808e-fa9373f702f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51014","PortSpecifier":{"PortValue":51014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51014","PortSpecifier":{"PortValue":51014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547349,"nanos":983871925},"http":{"id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e150623e-58ce-4428-b91c-a74051e277ae","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"]}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3afd5ef9186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7198852e-234f-44f5-a80d-330ce4ef59ba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e150623e-58ce-4428-b91c-a74051e277ae","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade7397e-d2ca-46cf-89eb-cfe39717db0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49276","PortSpecifier":{"PortValue":49276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49276","PortSpecifier":{"PortValue":49276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547350,"nanos":23631128},"http":{"id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ad70d68-69f9-40ff-863d-5670f4c5cb20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35200","PortSpecifier":{"PortValue":35200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35200","PortSpecifier":{"PortValue":35200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547351,"nanos":63862587},"http":{"id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5befccbf-70cd-4bba-8f1f-5e01d9346c0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35208","PortSpecifier":{"PortValue":35208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f760ff9-c78e-4080-93a7-07084b4d964f","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35208","PortSpecifier":{"PortValue":35208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547352,"nanos":102914055},"http":{"id":"5f760ff9-c78e-4080-93a7-07084b4d964f","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f760ff9-c78e-4080-93a7-07084b4d964f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547353,"nanos":143025205},"http":{"id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34f8005-bc5c-4d12-806d-263fcfb865e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35224","PortSpecifier":{"PortValue":35224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35224","PortSpecifier":{"PortValue":35224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547354,"nanos":187808657},"http":{"id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df81663f-d2bb-4b51-99d2-d2e5d13fbba7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35226","PortSpecifier":{"PortValue":35226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35226","PortSpecifier":{"PortValue":35226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547355,"nanos":222834311},"http":{"id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65ed0767-d145-4392-a1d6-6b4acd6c6db3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c61119ff-2709-439e-a300-f69b767c2fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35240","PortSpecifier":{"PortValue":35240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c61119ff-2709-439e-a300-f69b767c2fee","method":"POST","path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions","host":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c61119ff-2709-439e-a300-f69b767c2fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35240","PortSpecifier":{"PortValue":35240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547356,"nanos":259833278},"http":{"id":"c61119ff-2709-439e-a300-f69b767c2fee","method":"POST","headers":{":authority":"e2e-shared-a-fbb91c.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZsfdV2vfzZ6ANcma_iyts0aE9MIjFCrL0qpWajsaYpS2FFHYVFiiJXAEs0cL\"}"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","subscription":"e2e-rate-iso-a-d2c61e","tenant":"e2e-shared-a-fbb91c","userId":"59bdae34-547e-4dd5-b539-a2516c15e005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\",\"requestedSubscription\":\"e2e-rate-iso-a-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fbb91c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c61119ff-2709-439e-a300-f69b767c2fee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61119ff-2709-439e-a300-f69b767c2fee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59bdae34-547e-4dd5-b539-a2516c15e005","keyName":"e2e-rate-a-d2c61e","selected_subscription":"e2e-rate-iso-a-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-a-fbb91c/e2e-rate-iso-a-d2c61e@ai-tenant-e2e-shared-a-fbb91c/rate-test-model-fbb91c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fbb91c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d2c61e","namespace":"ai-tenant-e2e-shared-a-fbb91c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c61119ff-2709-439e-a300-f69b767c2fee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c61119ff-2709-439e-a300-f69b767c2fee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39982","PortSpecifier":{"PortValue":39982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","method":"POST","path":"/ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8/v1/completions","host":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39982","PortSpecifier":{"PortValue":39982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783547356,"nanos":294166308},"http":{"id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","method":"POST","headers":{":authority":"e2e-shared-b-6edaf8.apps.28969351-50a3-4a4b-8c99-c3afd5ef9186.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dlHlGGz0fGrjbA4o_dotqWNvVcidHgwHyhYQ5NoR2QS44b1YcO3mhXyjlSQ8"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dlHlGGz0fGrjbA4o_dotqWNvVcidHgwHyhYQ5NoR2QS44b1YcO3mhXyjlSQ8\"}"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adc371bd-a394-4290-a4d7-fb144daa3c40","keyName":"e2e-rate-b-d2c61e","subscription":"e2e-rate-iso-b-d2c61e","tenant":"e2e-shared-b-6edaf8","userId":"adc371bd-a394-4290-a4d7-fb144daa3c40","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8\",\"requestedSubscription\":\"e2e-rate-iso-b-d2c61e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6edaf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6edaf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d2c61e","namespace":"ai-tenant-e2e-shared-b-6edaf8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d2c61e"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adc371bd-a394-4290-a4d7-fb144daa3c40","keyName":"e2e-rate-b-d2c61e","selected_subscription":"e2e-rate-iso-b-d2c61e","selected_subscription_key":"ai-tenant-e2e-shared-b-6edaf8/e2e-rate-iso-b-d2c61e@ai-tenant-e2e-shared-b-6edaf8/rate-test-model-6edaf8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6edaf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d2c61e","namespace":"ai-tenant-e2e-shared-b-6edaf8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T21:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8098e93b-1f6f-4ca6-aae9-f39af43d08ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T21:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28bf2da0dfa3cf38dd67bc20ea0f0128dae7b178e6ceeaf8c61ee4ae9a379d9b"}
{"level":"info","ts":"2026-07-08T21:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d8e05e17bf2aa52311ba9f2aa2b8f708ea0a3a214bd3afc91ee27b4cbbb4ce"}
{"level":"info","ts":"2026-07-08T21:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0745863b456447e558a4a53ee4add4485fa8ff437454caa8e33542e7a59a9a72"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f55d82994fba5e63a0ce11c062f22c55f990b39c302e51b48b2ce098647f297"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3ee0616b923606ea609c87234346b85d41cbbb7db3809e14f4c561c6542bbd"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b129d5e6efbc7625e8756cf278870a82fa832d7456bea97fc3519b283490bdce"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e2113ac80d7650582a092eca892a76a0216af28256ba5a93dbe5e8e060356d9"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/601fa04d111a25234a8148e51d6d734fb7c307e259718911efe3e1705a809f98"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3566755a74bdf005c22036058ecb149b4921d09fd85759462e1e5bb04495887e"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ca1694823f5deda8e00acee784a19bc752890c3b80e577192c6444e2b353fd7"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677abf60d9019db2f024f7d302325636f91831a983506e03e8dd3255eff9c427"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3683d92f223e9e9c945cb1d4303f74bbf05a57822c225d08cb0cac9c7dfae1"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63900473334735a68ffa3164fef3b6a2368e3d36ca04361533f1f52f385d1d8c"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e6ed0b779b4e60c924bb81dba908ed945d89646ab3f5d68720479bed1bf0c4d"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/407bd59a62ce77cec81f4a4d17a9a1e36300cd7f093fc62470d14e255ce17718"}
{"level":"info","ts":"2026-07-08T21:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c26f474283304837eeac69681b91dccbf8c7415e4c587eaf20dee19ffac27b5b"}
{"level":"info","ts":"2026-07-08T21:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b43e0e1075c6422f6320fbb27346fa374aaca552536d337f7b697e2dc1c7b2b"}
{"level":"info","ts":"2026-07-08T21:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74f990853dc8a280afcc78b4bda00bb6954e86e746eecac2bbb04478e4b65ae3"}
{"level":"info","ts":"2026-07-08T21:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80a90b8e76d0ecb65ccc8b90421f826ebb06e42b00c2506645e850f9a1695e68"}
{"level":"info","ts":"2026-07-08T21:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38353481c388254a93bb2d85ca21ef7d2625b5783885841f70964ed2e16c209"}
{"level":"info","ts":"2026-07-08T21:50:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c80761d470cba66be83dd79aebc6da99105be485f578e77b7d309591637371d"}
{"level":"info","ts":"2026-07-08T21:50:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd08ee968d5b6b4ba9721913819e630146179e1d9e5f3b7a4dffd6c2fc1c1574"}
{"level":"info","ts":"2026-07-08T21:50:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75f96ff5e489bdca0150c4c75717a6fe8fd4c16a613ddfa524a8da7c70ca0f53"}
{"level":"info","ts":"2026-07-08T21:50:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2d1d29da451966389403278ffce45dc232693e39f4042eb27a8cc19dca79574"}