--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d84de592055b79651e75a18d020b05a47fa7c74157ec1f2c7bf18dabf3347ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e486a2bcae9a04eb17fba1a50f9bcd59fc6ab500e2956201fd345835cd48b042"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d84de592055b79651e75a18d020b05a47fa7c74157ec1f2c7bf18dabf3347ca"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"}
{"level":"error","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f"}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f"}
{"level":"info","ts":"2026-07-14T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"}
{"level":"info","ts":"2026-07-14T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"info","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"}
{"level":"error","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"info","ts":"2026-07-14T20:29:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49682","PortSpecifier":{"PortValue":49682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49682","PortSpecifier":{"PortValue":49682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060944,"nanos":529125863},"http":{"id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d128553-6267-4e02-9bf4-5c7e1a8f53b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33400","PortSpecifier":{"PortValue":33400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33400","PortSpecifier":{"PortValue":33400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060944,"nanos":608267983},"http":{"id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6c5712-daba-4f89-92f3-b3d4e78d6931","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d05473e-3291-43d7-8485-9d7023df456a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d05473e-3291-43d7-8485-9d7023df456a","method":"GET","path":"/maas-api/v1/api-keys/17c77197-2172-4fe4-aca6-62eff547789d","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d05473e-3291-43d7-8485-9d7023df456a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060944,"nanos":669873168},"http":{"id":"8d05473e-3291-43d7-8485-9d7023df456a","method":"GET","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/17c77197-2172-4fe4-aca6-62eff547789d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d05473e-3291-43d7-8485-9d7023df456a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d05473e-3291-43d7-8485-9d7023df456a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/17c77197-2172-4fe4-aca6-62eff547789d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d05473e-3291-43d7-8485-9d7023df456a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d05473e-3291-43d7-8485-9d7023df456a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d05473e-3291-43d7-8485-9d7023df456a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33404","PortSpecifier":{"PortValue":33404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","method":"GET","path":"/maas-api/v1/api-keys/8026ef9d-c150-4813-b630-7617b46a4d4a","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33404","PortSpecifier":{"PortValue":33404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060944,"nanos":715333025},"http":{"id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","method":"GET","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8026ef9d-c150-4813-b630-7617b46a4d4a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8026ef9d-c150-4813-b630-7617b46a4d4a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f2cf57-c46c-4087-b6a9-e148abb8f518","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35028","PortSpecifier":{"PortValue":35028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6389687f-9312-4001-8ae7-b73ade9dd318","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35028","PortSpecifier":{"PortValue":35028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060962,"nanos":219283596},"http":{"id":"6389687f-9312-4001-8ae7-b73ade9dd318","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6389687f-9312-4001-8ae7-b73ade9dd318","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52276","PortSpecifier":{"PortValue":52276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52276","PortSpecifier":{"PortValue":52276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060962,"nanos":259460977},"http":{"id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fdb68ff-4ce9-451a-b076-1360b120dcea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21aa88f3-112a-4932-9bdf-86fbbb995136","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060962,"nanos":295484126},"http":{"id":"21aa88f3-112a-4932-9bdf-86fbbb995136","method":"GET","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UctsWxlovjYgrsYU_kAS7GmZyjPKtS6JZkX7AfgZX0JfEbrs5nj1n5ZaLPSD"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UctsWxlovjYgrsYU_kAS7GmZyjPKtS6JZkX7AfgZX0JfEbrs5nj1n5ZaLPSD\"}"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e60f051-7655-4a07-b723-4ec520ae686f","keyName":"e2e-auth-iso-a-ad79b5","subscription":"e2e-auth-iso-85696a","tenant":"e2e-shared-a-10ef4d","userId":"8e60f051-7655-4a07-b723-4ec520ae686f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-85696a"}
{"level":"info","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21aa88f3-112a-4932-9bdf-86fbbb995136","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45586","PortSpecifier":{"PortValue":45586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45586","PortSpecifier":{"PortValue":45586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060979,"nanos":757170897},"http":{"id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb103890-8b07-44a1-9b3c-2bbb8ca1e003","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51306","PortSpecifier":{"PortValue":51306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51306","PortSpecifier":{"PortValue":51306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060979,"nanos":795307113},"http":{"id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d7a6e7-1f54-4fbd-8ab0-d9a49b312dbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51322","PortSpecifier":{"PortValue":51322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51322","PortSpecifier":{"PortValue":51322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060979,"nanos":842656270},"http":{"id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","method":"GET","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bbgWGwQMYQSsYlW1_K0Rj3Q8PGpVHEgRSJMtJ4e14nxplVAj0wPQrDyVzOK9"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bbgWGwQMYQSsYlW1_K0Rj3Q8PGpVHEgRSJMtJ4e14nxplVAj0wPQrDyVzOK9\"}"}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T20:29:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4508ec3c-b1d0-4818-94c9-ab5cb5790bc7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46858","PortSpecifier":{"PortValue":46858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46858","PortSpecifier":{"PortValue":46858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060995,"nanos":96436478},"http":{"id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b03db55f-4d33-417c-9d7f-253b86d4d4f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45044","PortSpecifier":{"PortValue":45044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45044","PortSpecifier":{"PortValue":45044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060995,"nanos":136289268},"http":{"id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e49f1779-0028-4864-a4cd-f2b4a695a62b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46868","PortSpecifier":{"PortValue":46868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46868","PortSpecifier":{"PortValue":46868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060995,"nanos":173442773},"http":{"id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d328dcf4-b9cd-4aa5-92af-48c33cd04a5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45058","PortSpecifier":{"PortValue":45058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"275c1a43-a62a-43da-836f-e210e404f4d5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45058","PortSpecifier":{"PortValue":45058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060995,"nanos":213015502},"http":{"id":"275c1a43-a62a-43da-836f-e210e404f4d5","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"275c1a43-a62a-43da-836f-e210e404f4d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75391751-1a39-461b-85cb-3010255a676e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75391751-1a39-461b-85cb-3010255a676e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75391751-1a39-461b-85cb-3010255a676e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061012,"nanos":539110809},"http":{"id":"75391751-1a39-461b-85cb-3010255a676e","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75391751-1a39-461b-85cb-3010255a676e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75391751-1a39-461b-85cb-3010255a676e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75391751-1a39-461b-85cb-3010255a676e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75391751-1a39-461b-85cb-3010255a676e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75391751-1a39-461b-85cb-3010255a676e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061012,"nanos":576315708},"http":{"id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e91f2ca-ae9e-49f2-8a0a-5628f71ea727","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50232","PortSpecifier":{"PortValue":50232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"647b11f7-e0b4-4803-880b-f6cd77c31258","method":"GET","path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50232","PortSpecifier":{"PortValue":50232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061012,"nanos":615801855},"http":{"id":"647b11f7-e0b4-4803-880b-f6cd77c31258","method":"GET","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"647b11f7-e0b4-4803-880b-f6cd77c31258","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6501aa17-9b63-4602-a0e1-5cc713bef150","method":"GET","path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061012,"nanos":650791775},"http":{"id":"6501aa17-9b63-4602-a0e1-5cc713bef150","method":"GET","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b12a1e28-505d-4c87-9989-982cfe9974c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6501aa17-9b63-4602-a0e1-5cc713bef150","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39100","PortSpecifier":{"PortValue":39100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39100","PortSpecifier":{"PortValue":39100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061027,"nanos":932518339},"http":{"id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8cf609-bbeb-4912-bb79-1cafc971bb14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39076","PortSpecifier":{"PortValue":39076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39076","PortSpecifier":{"PortValue":39076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061027,"nanos":970524764},"http":{"id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/auth-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8e6ba1-0105-4f78-9ad4-c506a634cd99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39110","PortSpecifier":{"PortValue":39110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39110","PortSpecifier":{"PortValue":39110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061028,"nanos":8643219},"http":{"id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cRSr3Tg9BBju48oZ_ZIJGwVaJcQAIieIxwMDdMxKDCgNpCG9WJ7P2Cd8vaAv"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cRSr3Tg9BBju48oZ_ZIJGwVaJcQAIieIxwMDdMxKDCgNpCG9WJ7P2Cd8vaAv\"}"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f81aa3c-6399-4eb5-8470-b54a05012947","keyName":"e2e-auth-iso-a-2be603","subscription":"e2e-auth-iso-a6133b","tenant":"e2e-shared-a-10ef4d","userId":"9f81aa3c-6399-4eb5-8470-b54a05012947","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/auth-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a6133b"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93a994db-a334-4a31-8cdc-a01abc0b99b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41636fa23b92d25b5ca7c8b2d3f975e4fcf6d28c62ec5146829988629efa7534"}
{"level":"info","ts":"2026-07-14T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/590fb82069d4e4199d42b71191670be9289559aaf673b3ec5a871bfb7ee72399"}
{"level":"info","ts":"2026-07-14T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7bfb593da94048ca791738506950ded3e90991b43bfbd3c935a9e6a7c0d0c4f"}
{"level":"info","ts":"2026-07-14T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e657063ab263f119e54fc93e9481d58de208457b1d379495ee5714c5fc0e17"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdd08f8d40a61d2fe11b089056ff3eba2971fae12c70599fbf8cd527269ca394"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4e7c7216010b89d37d01e9fe0d7bf7957f47be324ce14353a0f387420c380ef"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a30bf2076fdb4e4ee55b4092fcedda34f0c6159b210646b10a24a32c74ca7c"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d84de592055b79651e75a18d020b05a47fa7c74157ec1f2c7bf18dabf3347ca"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e104a4ca929fb6eab2dd921a99bff42e8a5c7b5cdc5e09b64dc1096cc3526b2"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58e173da9f648764f2a64a70143b07207630f67a12e13eb0a5f610466706d207"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d141ebb8c7545f1ade4225e4cdf1fb9f58ab1c6f57e26094eb68fcce7d3517d"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1f1b6308a6ec89c452d19946bff6a7c1dd1ac550a408d4db8ec8eab0abf7a1"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fedcadf03c3241ca619792da9d0353a911ff40fec660d7c9b92c28af72701f09"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e486a2bcae9a04eb17fba1a50f9bcd59fc6ab500e2956201fd345835cd48b042"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a42f33442465e4b6f690535a86be44237da10523d480751981d1f365ca96f5e"}
{"level":"info","ts":"2026-07-14T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6918839d013c0ed018ce355ef0d63daacda1955b580cc8b0d3339cfd518228c4"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"}
{"level":"error","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"info","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"}
{"level":"error","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"}
{"level":"info","ts":"2026-07-14T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"}
{"level":"debug","ts":"2026-07-14T20:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22073f9dc55a8d53939b72aba7c808c1c051f873a341e4abbe7db7453dc34778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22073f9dc55a8d53939b72aba7c808c1c051f873a341e4abbe7db7453dc34778"}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"}
{"level":"error","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f"}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"}
{"level":"info","ts":"2026-07-14T20:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57828","PortSpecifier":{"PortValue":57828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57828","PortSpecifier":{"PortValue":57828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061099,"nanos":263118315},"http":{"id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/sub-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c45776e-eaef-42ac-aab7-a6e0b075a30b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56312","PortSpecifier":{"PortValue":56312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56312","PortSpecifier":{"PortValue":56312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061099,"nanos":305037231},"http":{"id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/sub-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fedf0cf-c9de-473a-bdf9-39daa16be68a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57834","PortSpecifier":{"PortValue":57834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57834","PortSpecifier":{"PortValue":57834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061099,"nanos":343262656},"http":{"id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","method":"GET","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dQATED1hvKKAXfZ8_w9Vzu3tnLNUhZHciDsQRZsYobfLZZYIArdeLjjipqwA"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dQATED1hvKKAXfZ8_w9Vzu3tnLNUhZHciDsQRZsYobfLZZYIArdeLjjipqwA\"}"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd51deb1-28cc-4931-8072-e7fa94d748c7","keyName":"e2e-sub-iso-22c799","subscription":"e2e-a-only-fbe1a9","tenant":"e2e-shared-a-10ef4d","userId":"cd51deb1-28cc-4931-8072-e7fa94d748c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/sub-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fbe1a9"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3533ee7-11a3-48f2-a768-4af4ff1dfc8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061099,"nanos":385774101},"http":{"id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","method":"GET","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1K8SJRDluC5CyV4vT_mWpSRuHB86pX5NIwHKGWPka5dzrg8YYwl9wL4Wk3TwT"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1K8SJRDluC5CyV4vT_mWpSRuHB86pX5NIwHKGWPka5dzrg8YYwl9wL4Wk3TwT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d72e033-784b-40d1-aabb-0d3333ef1a81","keyName":"e2e-sub-iso-822f33","subscription":"e2e-b-only-fbe1a9","tenant":"e2e-shared-b-d04b66","userId":"7d72e033-784b-40d1-aabb-0d3333ef1a81","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/sub-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fbe1a9"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97dcb6d-a718-4512-b66b-6767f2829f0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56032","PortSpecifier":{"PortValue":56032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23163c3b-5597-43be-8a9d-c7285db884dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56032","PortSpecifier":{"PortValue":56032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061107,"nanos":552907587},"http":{"id":"23163c3b-5597-43be-8a9d-c7285db884dd","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/sub-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23163c3b-5597-43be-8a9d-c7285db884dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36710","PortSpecifier":{"PortValue":36710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36710","PortSpecifier":{"PortValue":36710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061107,"nanos":587453542},"http":{"id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/sub-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f49d9dd-9492-4e4e-941f-6ce0bb1ca8f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061107,"nanos":620982498},"http":{"id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8334KAHT8qd3FLOU_yAsP7aBZtXv7ZDJOBY7NsrjpKafWzLkuzJ7G5cTj7wl"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8334KAHT8qd3FLOU_yAsP7aBZtXv7ZDJOBY7NsrjpKafWzLkuzJ7G5cTj7wl\"}"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ef7a564-6ea8-43a4-a419-84e4a070b272","keyName":"e2e-sub-iso-09224a","subscription":"e2e-shared-sub-272fb1","tenant":"e2e-shared-a-10ef4d","userId":"6ef7a564-6ea8-43a4-a419-84e4a070b272","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/sub-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-272fb1"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76f1154b-e3d0-4fd6-bee3-5efd63982681","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36722","PortSpecifier":{"PortValue":36722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36722","PortSpecifier":{"PortValue":36722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061107,"nanos":651381220},"http":{"id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vzrzrtNOGO2YoaZO_ChDtssIGF3QOa9JdtBqNtJTx1FGA2sHlI6qLSbuNBs"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vzrzrtNOGO2YoaZO_ChDtssIGF3QOa9JdtBqNtJTx1FGA2sHlI6qLSbuNBs\"}"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33c8f65e-ccc2-4e10-8921-89979eb0d041","keyName":"e2e-sub-iso-16c226","subscription":"e2e-shared-sub-272fb1","tenant":"e2e-shared-b-d04b66","userId":"33c8f65e-ccc2-4e10-8921-89979eb0d041","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/sub-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-272fb1"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a6cef5-aa3b-9f96-b891-bb1ed004bba5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e53476a65972269570f9ecfa3622379751de3a5566eac54bd94a7509dfc76edf"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b723ece28c4f147f1773c73f376fd6d8a26ce9afc02d545714db6c988f97896d"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5fa07343b0da653d5ea3ebc95743b97328f007db368e90d61d5e041988c61d8"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b42a162c47dd9653fce2e756568eda44265672a12ab3c8b4f8e0c1413d0fb1a"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f672ce5759f517755243eb322056ece57b0c5879343b88a97e0fad2ddf8acfa"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e286294d63fc0fa60daeef780367fab46c9df53c6f67f97a57f8b33eaf3bd6e"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672e54d5f0f8f129d666c08c87e3d8d2e4181fd85569b8e24c47b5a153fc6d32"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba8182c5b4d5dc12549ddc12b7ba5fc2fc6fcdb1c1b5dfdb8c0b6e4cac7eea1c"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f8f1ff448d7a97486f8766d7f523ebdf410c981e8af433da6d127040c1d22b9"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee8831be6a8336b358f1c4455c7ac6d1a9530bc6963251e5924efa33bdacc5da"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/483b4ef699940ac96379b87833da4ee56a8546f390a97326c13be248cebe67dd"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ecba09cb8e191af8f885f103d492dd8457fd92198f6b901300768dd8a91834"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/699c010159e6a95fd9f343e7a3d195db35707d4c20c9d8d25c54bf65d82c2d06"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d13a689ae409921da8837731caaf8140ac12945073bb2899a6e3d3b83add6885"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7275fab8cb7122418b5ec486ff17240a0f3faaf9602673e302145ac28a08f60f"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698ff99221d3840e7989e91a86c70bfadfd318f63d38c60eb6aace9ea68c5b07"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"error","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"}
{"level":"info","ts":"2026-07-14T20:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"error","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"error","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"info","ts":"2026-07-14T20:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"error","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22073f9dc55a8d53939b72aba7c808c1c051f873a341e4abbe7db7453dc34778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"debug","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22073f9dc55a8d53939b72aba7c808c1c051f873a341e4abbe7db7453dc34778"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37242","PortSpecifier":{"PortValue":37242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37242","PortSpecifier":{"PortValue":37242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061168,"nanos":437636871},"http":{"id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b467ce72-c091-4a18-bb7f-1ae300d7fc28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37436","PortSpecifier":{"PortValue":37436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37436","PortSpecifier":{"PortValue":37436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061168,"nanos":477736874},"http":{"id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760a212-2e4e-4141-abd0-5fd53c68d5df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37248","PortSpecifier":{"PortValue":37248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37248","PortSpecifier":{"PortValue":37248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061168,"nanos":515916622},"http":{"id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv\"}"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","subscription":"e2e-rate-iso-a-8ee9ae","tenant":"e2e-shared-a-10ef4d","userId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-8ee9ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ee9ae"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","selected_subscription":"e2e-rate-iso-a-8ee9ae","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-8ee9ae@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16f3fcb9-9da6-4fbf-86e2-17955b9bb168","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37256","PortSpecifier":{"PortValue":37256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1088e837-bec9-42bf-a0ca-81e11079e942","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37256","PortSpecifier":{"PortValue":37256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061169,"nanos":576189871},"http":{"id":"1088e837-bec9-42bf-a0ca-81e11079e942","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv\"}"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","subscription":"e2e-rate-iso-a-8ee9ae","tenant":"e2e-shared-a-10ef4d","userId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-8ee9ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ee9ae"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","selected_subscription":"e2e-rate-iso-a-8ee9ae","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-8ee9ae@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1088e837-bec9-42bf-a0ca-81e11079e942","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37258","PortSpecifier":{"PortValue":37258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5eea939-3f8d-486e-b865-a1337928cafe","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37258","PortSpecifier":{"PortValue":37258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061170,"nanos":622231391},"http":{"id":"b5eea939-3f8d-486e-b865-a1337928cafe","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0jBG99UI6zRaRBu_jdh1nNgPDdbWh1i27yh5ngbDZ2ge3XhBiqR6AT9SMSv\"}"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","subscription":"e2e-rate-iso-a-8ee9ae","tenant":"e2e-shared-a-10ef4d","userId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-8ee9ae\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ee9ae"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a1619c-d1dd-4fee-a006-bd340b704df1","keyName":"e2e-rate-a-8ee9ae","selected_subscription":"e2e-rate-iso-a-8ee9ae","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-8ee9ae@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ee9ae","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5eea939-3f8d-486e-b865-a1337928cafe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34730","PortSpecifier":{"PortValue":34730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34730","PortSpecifier":{"PortValue":34730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061177,"nanos":518745068},"http":{"id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e302b7-dd1f-419d-afff-a891b7afb7a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34268","PortSpecifier":{"PortValue":34268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79f2193-7028-41ee-9c4f-084f88bc131d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34268","PortSpecifier":{"PortValue":34268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061177,"nanos":554946251},"http":{"id":"f79f2193-7028-41ee-9c4f-084f88bc131d","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"]}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4984d2c90a66"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3baa49a-68d3-48b6-92d6-f5046695932f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5f7ca290-3c33-449a-8f0a-9307de540c3b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79f2193-7028-41ee-9c4f-084f88bc131d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34746","PortSpecifier":{"PortValue":34746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34746","PortSpecifier":{"PortValue":34746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061177,"nanos":590160740},"http":{"id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1919c1b7-6167-474a-bfa6-fde64ded2fa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34750","PortSpecifier":{"PortValue":34750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34750","PortSpecifier":{"PortValue":34750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061178,"nanos":628868767},"http":{"id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e095871-1673-42c7-9f3e-afd6015cdf6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34764","PortSpecifier":{"PortValue":34764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44dd476c-2844-4ad7-8537-6314560f8ec1","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34764","PortSpecifier":{"PortValue":34764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061179,"nanos":669694886},"http":{"id":"44dd476c-2844-4ad7-8537-6314560f8ec1","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44dd476c-2844-4ad7-8537-6314560f8ec1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34774","PortSpecifier":{"PortValue":34774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31441c00-fa89-454f-a1ac-74fbda4415ce","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34774","PortSpecifier":{"PortValue":34774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061180,"nanos":708108627},"http":{"id":"31441c00-fa89-454f-a1ac-74fbda4415ce","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31441c00-fa89-454f-a1ac-74fbda4415ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34784","PortSpecifier":{"PortValue":34784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34784","PortSpecifier":{"PortValue":34784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061181,"nanos":748168013},"http":{"id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4840ecca-b33d-4ca3-a167-7bc1fbeae145","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34800","PortSpecifier":{"PortValue":34800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34800","PortSpecifier":{"PortValue":34800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061182,"nanos":787407703},"http":{"id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7757c2b4-7d1a-4d86-9d19-06718c0b3a9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34808","PortSpecifier":{"PortValue":34808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34808","PortSpecifier":{"PortValue":34808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061183,"nanos":827826742},"http":{"id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d9fff6-9b7f-40fe-a5f7-ccecb0170cb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48934","PortSpecifier":{"PortValue":48934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48934","PortSpecifier":{"PortValue":48934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061184,"nanos":862259797},"http":{"id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab49d3c2-7227-4a27-90fa-84c0890be46c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061185,"nanos":896721299},"http":{"id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0a9c73-790d-4075-bf46-8a60cd652cb7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","method":"POST","path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions","host":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061186,"nanos":935568385},"http":{"id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","method":"POST","headers":{":authority":"e2e-shared-a-10ef4d.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ygrYTQpqqvF7Xkb_Xv54t4WzfyPpb63F7pPJv5XwwuYSyPr5awOBKfSrZwF\"}"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","subscription":"e2e-rate-iso-a-5085f8","tenant":"e2e-shared-a-10ef4d","userId":"8b220532-69d5-4315-9332-890ef625776a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\",\"requestedSubscription\":\"e2e-rate-iso-a-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-10ef4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-10ef4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b220532-69d5-4315-9332-890ef625776a","keyName":"e2e-rate-a-5085f8","selected_subscription":"e2e-rate-iso-a-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-a-10ef4d/e2e-rate-iso-a-5085f8@ai-tenant-e2e-shared-a-10ef4d/rate-test-model-10ef4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-10ef4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5085f8","namespace":"ai-tenant-e2e-shared-a-10ef4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768bebfa-5cfc-4362-aa51-51aa66ad74f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c715ea51-2626-48f2-9ad9-e2fa88147438","method":"POST","path":"/ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66/v1/completions","host":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061186,"nanos":970121561},"http":{"id":"c715ea51-2626-48f2-9ad9-e2fa88147438","method":"POST","headers":{":authority":"e2e-shared-b-d04b66.apps.126eb6ca-52e4-421a-ae93-4984d2c90a66.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2qSah8YG6oWlFfwP_eFDHO15OQy3ZfsF27UziiQeY1MmYZtDOJ2fQYkLMlFX"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2qSah8YG6oWlFfwP_eFDHO15OQy3ZfsF27UziiQeY1MmYZtDOJ2fQYkLMlFX\"}"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0dfdee48-0d81-4d6b-8d07-6d4d0dde21e3","keyName":"e2e-rate-b-5085f8","subscription":"e2e-rate-iso-b-5085f8","tenant":"e2e-shared-b-d04b66","userId":"0dfdee48-0d81-4d6b-8d07-6d4d0dde21e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66\",\"requestedSubscription\":\"e2e-rate-iso-b-5085f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d04b66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d04b66","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5085f8","namespace":"ai-tenant-e2e-shared-b-d04b66","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d04b66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5085f8"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0dfdee48-0d81-4d6b-8d07-6d4d0dde21e3","keyName":"e2e-rate-b-5085f8","selected_subscription":"e2e-rate-iso-b-5085f8","selected_subscription_key":"ai-tenant-e2e-shared-b-d04b66/e2e-rate-iso-b-5085f8@ai-tenant-e2e-shared-b-d04b66/rate-test-model-d04b66","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d04b66","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5085f8","namespace":"ai-tenant-e2e-shared-b-d04b66","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c715ea51-2626-48f2-9ad9-e2fa88147438","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef13629378ba0c1b7b8b3fd7f12ae80438dba75b13bdcc3ba30edb8b0b2e7bea"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee4ee24ea6c385cdd46d741fa0c1a8c7d2569c9ea3c74aa6143e27a813f9805b"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff79f807eae6a13233651edf0b2b0f576c7873223ed4ba7187c2dc05da4cace5"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf80bb685a388bca3b8cd29f74c888a167be23d9ac82c01137fd13b44b5d6fbe"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/857dd0206095210adec4e2fc77d876a3d7158cab333b9c68d9bca274d08b636f"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b8da889b2da09bb8714325a0723d4edfa374097693680e289958ecaff408626"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/826b10ce7bf13a80bf12d7824bbebd76c76227b2d5fff66e6df08856ef86d22c"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e722fa04c946dcf1e51aa516c7ab63e2495a853157e7812b458b1a745a82d30a"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ababf244b02e1aab51519531ab12cc92ce09bb5acf342002d521204f7298d0b"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943e395b7778b0ec20ceffa7e5833a070f2251dbc1898735c4a64cbee4b71750"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/689ec9f4063d6a85b0af8a012a4f80f679ed52bbf7077c0afb50a793bacbb4eb"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a57eb2228c631c3b0ba7412333a91784bb0ec8d46efc736ee7c85b5656aa2ebe"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/403dc7361e8b5d4945eeac921cd0bfdb9f9278b81d3cad94789169aca7e85510"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/780116c7f06975ab13d29bf9acde6677f4afa89788f26856c055f24323a4fb7d"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6413bd42d410099454bdbbc85f82af4e8917c1fbe5dec2b6a64e52b1b040b5ce"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb04fc3da85a8b77e241b5f969f6c99a3d834a34beade807735c61201da54ff7"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/573d412ce45c594b199cf5144c4998dbe91d0a067c2ad02738da48a91fd3131b"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858d4c3fbcb0d7f004c14478b5b1a0e63988dade7db601148b20e6d22dc4f85a"}
{"level":"info","ts":"2026-07-14T20:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22073f9dc55a8d53939b72aba7c808c1c051f873a341e4abbe7db7453dc34778"}
{"level":"info","ts":"2026-07-14T20:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc44afc2a7ff1514180d31c2dadefd9069875665182914b7c1ae2554fab15ce"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9850d1e0843ed114116db8f01ec3d242a1a45affee2abf74a9b21abb8c57decf"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2436a5de33b9b13c2b44fb7ee3b30f2bce393ba95b19f451cd762f38ef84edd4"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e9f6c88236d409f9b60399509d81dc13f6743a611d6bc98483f7fb6f3f56a5"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0727488f9197e1b384591fd8760a2212d9871f2ff35b02532180b836cdd0f702"}