--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a78bebab570338b5cd1bf32b87b5f07317e2111b4342a085d9c0f100740c37"}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"debug","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"error","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55146","PortSpecifier":{"PortValue":55146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55146","PortSpecifier":{"PortValue":55146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035923,"nanos":60212399},"http":{"id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b45e19-0e06-418d-82d1-f479aa50b3d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56332","PortSpecifier":{"PortValue":56332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f720b88c-8a68-4167-9f46-6cdbb8201072","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56332","PortSpecifier":{"PortValue":56332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035923,"nanos":132328587},"http":{"id":"f720b88c-8a68-4167-9f46-6cdbb8201072","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f720b88c-8a68-4167-9f46-6cdbb8201072","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55158","PortSpecifier":{"PortValue":55158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","method":"GET","path":"/maas-api/v1/api-keys/20d386ec-8b3d-4fe6-9d19-ad57f9861d7b","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55158","PortSpecifier":{"PortValue":55158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035923,"nanos":213912838},"http":{"id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","method":"GET","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20d386ec-8b3d-4fe6-9d19-ad57f9861d7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20d386ec-8b3d-4fe6-9d19-ad57f9861d7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1dfd3b3-b873-4b8a-b2e8-2cfdb729bf31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56336","PortSpecifier":{"PortValue":56336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","method":"GET","path":"/maas-api/v1/api-keys/1215b022-7e3c-4a33-8978-69a4c864ae9c","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56336","PortSpecifier":{"PortValue":56336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035923,"nanos":252915360},"http":{"id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","method":"GET","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1215b022-7e3c-4a33-8978-69a4c864ae9c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1215b022-7e3c-4a33-8978-69a4c864ae9c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcdf1d7-7980-4526-8155-1d6e182c4b93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9451004a-5174-4090-9fa7-2333de788227","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9451004a-5174-4090-9fa7-2333de788227","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9451004a-5174-4090-9fa7-2333de788227","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035938,"nanos":139481751},"http":{"id":"9451004a-5174-4090-9fa7-2333de788227","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9451004a-5174-4090-9fa7-2333de788227","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9451004a-5174-4090-9fa7-2333de788227","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9451004a-5174-4090-9fa7-2333de788227","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9451004a-5174-4090-9fa7-2333de788227","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9451004a-5174-4090-9fa7-2333de788227","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a59562e-5557-4582-ba61-acb962865d2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a59562e-5557-4582-ba61-acb962865d2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a59562e-5557-4582-ba61-acb962865d2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035938,"nanos":178888711},"http":{"id":"0a59562e-5557-4582-ba61-acb962865d2f","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a59562e-5557-4582-ba61-acb962865d2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a59562e-5557-4582-ba61-acb962865d2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a59562e-5557-4582-ba61-acb962865d2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a59562e-5557-4582-ba61-acb962865d2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a59562e-5557-4582-ba61-acb962865d2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33346","PortSpecifier":{"PortValue":33346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a63dd193-8cae-4938-825d-6cc226d8b865","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33346","PortSpecifier":{"PortValue":33346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035938,"nanos":221287633},"http":{"id":"a63dd193-8cae-4938-825d-6cc226d8b865","method":"GET","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AyEAsx4gMGSjkpEl_mt4JdQ8adYMUmUYQ9HjzNNHVcThIhxAyEgORakvXDdd"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AyEAsx4gMGSjkpEl_mt4JdQ8adYMUmUYQ9HjzNNHVcThIhxAyEgORakvXDdd\"}"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0c2d372-6df3-40e8-b5b7-6255b7a08434","keyName":"e2e-auth-iso-a-cf4a9c","subscription":"e2e-auth-iso-31968d","tenant":"e2e-shared-a-aefe3e","userId":"d0c2d372-6df3-40e8-b5b7-6255b7a08434","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-31968d"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a63dd193-8cae-4938-825d-6cc226d8b865","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37026","PortSpecifier":{"PortValue":37026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37026","PortSpecifier":{"PortValue":37026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035955,"nanos":310506007},"http":{"id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a68c49c-cfda-4309-ac13-f8aa2e7f5265","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42354","PortSpecifier":{"PortValue":42354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42354","PortSpecifier":{"PortValue":42354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035955,"nanos":352175714},"http":{"id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08fd8fae-14b4-406f-97f2-0cd16fc2ff51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42370","PortSpecifier":{"PortValue":42370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42370","PortSpecifier":{"PortValue":42370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035955,"nanos":389136685},"http":{"id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","method":"GET","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aTUrBexEgsaYMURo_mCx1YQQVPaUiXik86xxicWPl68igYhuIdYqAlo4jwaB"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aTUrBexEgsaYMURo_mCx1YQQVPaUiXik86xxicWPl68igYhuIdYqAlo4jwaB\"}"}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T23:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c119a9e-7b93-49c5-a251-c5296c3a90d1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41520","PortSpecifier":{"PortValue":41520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41520","PortSpecifier":{"PortValue":41520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035972,"nanos":474775187},"http":{"id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"732440e3-a410-4eab-aa8f-1cc0d67e6967","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035972,"nanos":511044493},"http":{"id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65611d7-3312-4cf6-a547-79ce1b1ad56d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41530","PortSpecifier":{"PortValue":41530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41530","PortSpecifier":{"PortValue":41530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035972,"nanos":558022658},"http":{"id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce5323a1-f35d-4130-86c5-a7f6252a8802","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33310","PortSpecifier":{"PortValue":33310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91f4cd32-097e-4e93-b785-45a50e360e45","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33310","PortSpecifier":{"PortValue":33310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035972,"nanos":597749240},"http":{"id":"91f4cd32-097e-4e93-b785-45a50e360e45","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91f4cd32-097e-4e93-b785-45a50e360e45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50856","PortSpecifier":{"PortValue":50856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d88fed46-3e95-4a82-8199-a3823d488a93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50856","PortSpecifier":{"PortValue":50856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035989,"nanos":630932933},"http":{"id":"d88fed46-3e95-4a82-8199-a3823d488a93","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88fed46-3e95-4a82-8199-a3823d488a93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54614","PortSpecifier":{"PortValue":54614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54614","PortSpecifier":{"PortValue":54614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035989,"nanos":664438147},"http":{"id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cc2aee-8e8c-43dd-b48d-f0cd9faac3d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54630","PortSpecifier":{"PortValue":54630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","method":"GET","path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54630","PortSpecifier":{"PortValue":54630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035989,"nanos":702549571},"http":{"id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","method":"GET","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fcc4fe-4336-47bb-bf18-dbc9a8d7d608","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5021752a-78a1-4722-98da-3efc712416ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5021752a-78a1-4722-98da-3efc712416ea","method":"GET","path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5021752a-78a1-4722-98da-3efc712416ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035989,"nanos":736085605},"http":{"id":"5021752a-78a1-4722-98da-3efc712416ea","method":"GET","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5021752a-78a1-4722-98da-3efc712416ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5021752a-78a1-4722-98da-3efc712416ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c001526e-6447-49b4-b058-78a92cb97c14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5021752a-78a1-4722-98da-3efc712416ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5021752a-78a1-4722-98da-3efc712416ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5021752a-78a1-4722-98da-3efc712416ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1526994-1567-4820-babe-636781e9b303","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38204","PortSpecifier":{"PortValue":38204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1526994-1567-4820-babe-636781e9b303","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1526994-1567-4820-babe-636781e9b303","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38204","PortSpecifier":{"PortValue":38204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036006,"nanos":825863110},"http":{"id":"b1526994-1567-4820-babe-636781e9b303","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1526994-1567-4820-babe-636781e9b303","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1526994-1567-4820-babe-636781e9b303","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1526994-1567-4820-babe-636781e9b303","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1526994-1567-4820-babe-636781e9b303","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1526994-1567-4820-babe-636781e9b303","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aef3736-953e-407b-a07c-961ab41243a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57072","PortSpecifier":{"PortValue":57072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aef3736-953e-407b-a07c-961ab41243a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aef3736-953e-407b-a07c-961ab41243a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57072","PortSpecifier":{"PortValue":57072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036006,"nanos":862844465},"http":{"id":"1aef3736-953e-407b-a07c-961ab41243a9","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1aef3736-953e-407b-a07c-961ab41243a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aef3736-953e-407b-a07c-961ab41243a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/auth-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aef3736-953e-407b-a07c-961ab41243a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aef3736-953e-407b-a07c-961ab41243a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aef3736-953e-407b-a07c-961ab41243a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38218","PortSpecifier":{"PortValue":38218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38218","PortSpecifier":{"PortValue":38218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036006,"nanos":899578581},"http":{"id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zacWOXL3Ce1XIRH9_IQpu3JroNv8V6ewNWDvCT00xco5VOLsxPUCPnfyxNN6"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zacWOXL3Ce1XIRH9_IQpu3JroNv8V6ewNWDvCT00xco5VOLsxPUCPnfyxNN6\"}"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e2a44e0-df67-4ad3-b8f1-2037704d0c9f","keyName":"e2e-auth-iso-a-46b908","subscription":"e2e-auth-iso-b78bd4","tenant":"e2e-shared-a-aefe3e","userId":"5e2a44e0-df67-4ad3-b8f1-2037704d0c9f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/auth-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b78bd4"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa93365a-4b12-4823-8be6-0abee6c9a84c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aef2566545af2d98f90d7d771f51e45acd775ca66f71cec4236d8e23db922867"}
{"level":"info","ts":"2026-07-02T23:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb05882622b1dc8136cfe0a28a02ccf6b12ae39ca254d1636e1ed59926b391ab"}
{"level":"info","ts":"2026-07-02T23:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51df6ae55827204c542a6d55f399ae9048179907fd42ae3d53505481000f1a2d"}
{"level":"info","ts":"2026-07-02T23:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deceac234d6c1470d0061d7be89a7b3d403e6378f8de5ce0de7175d6eafecb49"}
{"level":"info","ts":"2026-07-02T23:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b316a788958d8fea317b688305927aafd4fbbce0a43dff934b417657e5d9d71"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e9ac4563d89c288c5e23517d0b32fb55d3dfc21c63b05d4733388b6ea94582c"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29023598dd039d5e06aa2b4eb4124321e507fe7ac470aa4c358aa24fbe65b1ff"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc566822a2e6b247bd117b7bf973c7366b48404f83234a0d49d8916535173a6c"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3849607d0592c4bedf5cca121743e349bd344f277ea3bec883835cac44987721"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7ca5cbae75da514dc7f1f3c7934f9ff112294595d9f698fab9869c1a0a4b24"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c28100181a4f1d9bcd3be8184a189b11656ab8c9eba00b2473efee033db54ad4"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a78bebab570338b5cd1bf32b87b5f07317e2111b4342a085d9c0f100740c37"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/982c7985cd1925004e3132eeed8536977d2c5025e0d3f69a8eb700d401c9e647"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/681ca781be3afa2423469a4a93f4509516e8b4372c5877523d4d0917169809e5"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e5c0c813f5366e4b55062dd6c0395ce8165b784d1897baa460119bdc442319"}
{"level":"info","ts":"2026-07-02T23:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58319baa36773f35c0a379601f32022c7a663e83293a510a18a40aab3668d76"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"error","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"info","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11"}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7046bcf34fd5977da89df74822a910c85ab75aac3254daaf8e0496525fc47f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"debug","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7046bcf34fd5977da89df74822a910c85ab75aac3254daaf8e0496525fc47f7"}
{"level":"info","ts":"2026-07-02T23:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68efe2a7-2516-449f-ae26-83badf791882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49952","PortSpecifier":{"PortValue":49952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68efe2a7-2516-449f-ae26-83badf791882","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68efe2a7-2516-449f-ae26-83badf791882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49952","PortSpecifier":{"PortValue":49952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036067,"nanos":182867701},"http":{"id":"68efe2a7-2516-449f-ae26-83badf791882","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68efe2a7-2516-449f-ae26-83badf791882","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68efe2a7-2516-449f-ae26-83badf791882","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/sub-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68efe2a7-2516-449f-ae26-83badf791882","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68efe2a7-2516-449f-ae26-83badf791882","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68efe2a7-2516-449f-ae26-83badf791882","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"882e20c2-06e4-4b99-99d3-77a95aebf973","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036067,"nanos":228741925},"http":{"id":"882e20c2-06e4-4b99-99d3-77a95aebf973","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/sub-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"882e20c2-06e4-4b99-99d3-77a95aebf973","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49960","PortSpecifier":{"PortValue":49960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49960","PortSpecifier":{"PortValue":49960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036067,"nanos":274935377},"http":{"id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","method":"GET","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AtDFWGZv5MymHgwm_o3KXlNFkKUoKRt3Auxh5mMIRA1W7ber6OdX01SaqPMZ"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AtDFWGZv5MymHgwm_o3KXlNFkKUoKRt3Auxh5mMIRA1W7ber6OdX01SaqPMZ\"}"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e53cd83d-2add-44d3-b0d9-06800e26186b","keyName":"e2e-sub-iso-e347d1","subscription":"e2e-a-only-1e2d56","tenant":"e2e-shared-a-aefe3e","userId":"e53cd83d-2add-44d3-b0d9-06800e26186b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/sub-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1e2d56"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d8fbcf7-53d5-4aed-bcc9-5d195707e6a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6749754b-e95a-4c90-a23a-a235c2fb4156","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036067,"nanos":318452871},"http":{"id":"6749754b-e95a-4c90-a23a-a235c2fb4156","method":"GET","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LcmfGop1fpjCacjR_1uCwgWZdNHOZJ3a6OSxuJNfUT5hLgq1YHdLQJwV313S"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LcmfGop1fpjCacjR_1uCwgWZdNHOZJ3a6OSxuJNfUT5hLgq1YHdLQJwV313S\"}"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"349eb553-6af2-46b1-b75c-81d2110f87be","keyName":"e2e-sub-iso-4a92bd","subscription":"e2e-b-only-1e2d56","tenant":"e2e-shared-b-b07c26","userId":"349eb553-6af2-46b1-b75c-81d2110f87be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/sub-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1e2d56"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6749754b-e95a-4c90-a23a-a235c2fb4156","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34204","PortSpecifier":{"PortValue":34204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34204","PortSpecifier":{"PortValue":34204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036085,"nanos":692130765},"http":{"id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/sub-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af7846c4-a341-4ae1-91e0-ccd8c8d54898","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed432082-e402-4de9-b05c-3b086215df3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed432082-e402-4de9-b05c-3b086215df3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed432082-e402-4de9-b05c-3b086215df3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036085,"nanos":726916256},"http":{"id":"ed432082-e402-4de9-b05c-3b086215df3f","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed432082-e402-4de9-b05c-3b086215df3f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed432082-e402-4de9-b05c-3b086215df3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/sub-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed432082-e402-4de9-b05c-3b086215df3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed432082-e402-4de9-b05c-3b086215df3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed432082-e402-4de9-b05c-3b086215df3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34214","PortSpecifier":{"PortValue":34214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34214","PortSpecifier":{"PortValue":34214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036085,"nanos":763621225},"http":{"id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LiCR8oUYsHQW3PzB_wPcbNqrY8uynAX84lieWP0Hhe55TYVTWC43WG7Noqmc"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LiCR8oUYsHQW3PzB_wPcbNqrY8uynAX84lieWP0Hhe55TYVTWC43WG7Noqmc\"}"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41af80f4-f097-4210-b84f-b548b88bb89d","keyName":"e2e-sub-iso-cf964e","subscription":"e2e-shared-sub-e925fa","tenant":"e2e-shared-a-aefe3e","userId":"41af80f4-f097-4210-b84f-b548b88bb89d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/sub-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e925fa"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d496e16-fea1-41b8-844a-e312c2b26ba4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47138","PortSpecifier":{"PortValue":47138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47138","PortSpecifier":{"PortValue":47138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036085,"nanos":795817401},"http":{"id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fCXPDzHUd5gJtzKf_HQj9wRaYZ4H1ZOZfug7AR4KmqM2CvwN6UTphrxjDo8W"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fCXPDzHUd5gJtzKf_HQj9wRaYZ4H1ZOZfug7AR4KmqM2CvwN6UTphrxjDo8W\"}"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e0d7023-3adb-4d16-af2b-09f09c1f6d2c","keyName":"e2e-sub-iso-f27942","subscription":"e2e-shared-sub-e925fa","tenant":"e2e-shared-b-b07c26","userId":"6e0d7023-3adb-4d16-af2b-09f09c1f6d2c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/sub-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e925fa"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb5edf7f-68d3-4479-82d1-e08f504d2943","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae157825dd34259a2fc2de2fc230e8ba3d5b3e30c316263fee06ce3a60f1e54"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63af6fa92256f0869273bc047bc4b5580aff0ecdab4eb6954e48ca86a893c146"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f2319b37537f6ff973893dc47189d7eb322e8390820d87fe449f7a13ec6ce11"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5022bf7e4331aa53873561845cd3675dc938e36b7a42cadd7663dad1f1de75dc"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d39c5a3685c0dc1d045d8023256dee818a88ceeca718d66d744b6c326657fd83"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/425f92fcdf271c061d5fe6207759cc8e6f02ff4fff7fd67010b416c977c0e0b2"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df487586f2d218941f0f7ff9a20312a47d78ff5d11b7687f653b67edc4d895af"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d9d16c79d89411685609248145f39b82ff6d04b89ff8bb99275d7b81618fa4e"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f9e494ca449a0a5b37e191c2777f696dcdfc5538331c46b0983c3667f284e88"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b169af1a810390b0c187053d449bd182c89c3b8c016b0a9be095a3cf7b088abe"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5cff13a02aaa2cbf17b565b23d7f8864a0a4084370c516250455c912318e5a"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a93dd7cc21d059b75d5b272f82f2ca9ce9e1786d5963fa75f4836c3d1d850483"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1514115a7c953c447cd289613463f3f48ee611bbc7030493a763b0c11eadfd1"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4347d4a932f16410decb22ee4afc0cae378c5194d26affc11205f9992d749b5"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3a2eb0a164d760a69e43102eaac47361be94faaa9f104ca3f527c7030c15185"}
{"level":"info","ts":"2026-07-02T23:48:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da79f5552ff65f10ea848ed1552c6068bc52b23c51572ff0c6581c0372dd08a4"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"error","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"}
{"level":"error","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"error","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048"}
{"level":"debug","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7046bcf34fd5977da89df74822a910c85ab75aac3254daaf8e0496525fc47f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7046bcf34fd5977da89df74822a910c85ab75aac3254daaf8e0496525fc47f7"}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45736","PortSpecifier":{"PortValue":45736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45736","PortSpecifier":{"PortValue":45736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036144,"nanos":181543162},"http":{"id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50b7a1f2-8fa1-47da-94d7-bbcb0626b131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44604","PortSpecifier":{"PortValue":44604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44604","PortSpecifier":{"PortValue":44604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036144,"nanos":226723956},"http":{"id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf4ad1a-4087-4988-86da-15b0789ffc25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036144,"nanos":269805665},"http":{"id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf\"}"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","subscription":"e2e-rate-iso-a-f9e226","tenant":"e2e-shared-a-aefe3e","userId":"908f123a-c60b-4173-87b5-c6d8134b0d82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f9e226\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f9e226"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","selected_subscription":"e2e-rate-iso-a-f9e226","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-f9e226@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fe4bd5-ecf8-4e19-97ab-ce0fe8e2461f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52014","PortSpecifier":{"PortValue":52014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52014","PortSpecifier":{"PortValue":52014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036145,"nanos":327882170},"http":{"id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf\"}"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","subscription":"e2e-rate-iso-a-f9e226","tenant":"e2e-shared-a-aefe3e","userId":"908f123a-c60b-4173-87b5-c6d8134b0d82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f9e226\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f9e226"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","selected_subscription":"e2e-rate-iso-a-f9e226","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-f9e226@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8112a9-e586-43f0-94b5-28fafe4a280d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25e4b41a-1fe5-474d-babf-cd5e816597be","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036146,"nanos":372153240},"http":{"id":"25e4b41a-1fe5-474d-babf-cd5e816597be","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1auJRN9eE8Yb8Mz06_tQrxQHjPXJ5iHi38I2aFEe3N0nrVX8dztnm5Fx6hIrf\"}"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","subscription":"e2e-rate-iso-a-f9e226","tenant":"e2e-shared-a-aefe3e","userId":"908f123a-c60b-4173-87b5-c6d8134b0d82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f9e226\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f9e226"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"908f123a-c60b-4173-87b5-c6d8134b0d82","keyName":"e2e-rate-a-f9e226","selected_subscription":"e2e-rate-iso-a-f9e226","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-f9e226@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f9e226","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25e4b41a-1fe5-474d-babf-cd5e816597be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51490","PortSpecifier":{"PortValue":51490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51490","PortSpecifier":{"PortValue":51490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036154,"nanos":980843124},"http":{"id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e80607ef-0e37-4290-9a66-8efb7d9a47dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51380","PortSpecifier":{"PortValue":51380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51380","PortSpecifier":{"PortValue":51380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036155,"nanos":24383473},"http":{"id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"]}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1bcc8328895"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a94692e-499a-434e-9ca2-f0ce553dcf57"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"239f12f6-f700-4b80-b7e4-e01d1e43c1e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b4f4f3-1bf1-4887-8a04-6e57907a366d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3468933-7482-4a48-8a68-1caec6269e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51500","PortSpecifier":{"PortValue":51500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3468933-7482-4a48-8a68-1caec6269e97","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3468933-7482-4a48-8a68-1caec6269e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51500","PortSpecifier":{"PortValue":51500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036155,"nanos":65885468},"http":{"id":"b3468933-7482-4a48-8a68-1caec6269e97","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3468933-7482-4a48-8a68-1caec6269e97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3468933-7482-4a48-8a68-1caec6269e97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3468933-7482-4a48-8a68-1caec6269e97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3468933-7482-4a48-8a68-1caec6269e97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51516","PortSpecifier":{"PortValue":51516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51516","PortSpecifier":{"PortValue":51516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036156,"nanos":102883939},"http":{"id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef438bd-9639-4342-99a2-8bfbfe0bbe73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036157,"nanos":139959147},"http":{"id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe9db53-652f-4359-a60e-3c12ffdd1fe5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51524","PortSpecifier":{"PortValue":51524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51524","PortSpecifier":{"PortValue":51524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036158,"nanos":176155469},"http":{"id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04451563-c754-46a6-bbd1-fb5cde3ae4f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51538","PortSpecifier":{"PortValue":51538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51538","PortSpecifier":{"PortValue":51538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036159,"nanos":216793081},"http":{"id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e2eec0-61ce-4264-8c54-0636c22dfad5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51548","PortSpecifier":{"PortValue":51548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51548","PortSpecifier":{"PortValue":51548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036160,"nanos":255209685},"http":{"id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe526a3-2274-4d7d-a637-d9952e05c3bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51560","PortSpecifier":{"PortValue":51560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a45abe42-8671-47eb-bdd6-fa750f854024","method":"POST","path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions","host":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51560","PortSpecifier":{"PortValue":51560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036161,"nanos":295529027},"http":{"id":"a45abe42-8671-47eb-bdd6-fa750f854024","method":"POST","headers":{":authority":"e2e-shared-a-aefe3e.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gef8RcAr4LWa0By5_VX9S17xq9ACj4XwxA9qTVA3SUSGr6f11nlJVauk6opB\"}"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","subscription":"e2e-rate-iso-a-7cb961","tenant":"e2e-shared-a-aefe3e","userId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\",\"requestedSubscription\":\"e2e-rate-iso-a-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aefe3e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0a49024-c094-4bf0-9cd0-afecf8df76e4","keyName":"e2e-rate-a-7cb961","selected_subscription":"e2e-rate-iso-a-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-a-aefe3e/e2e-rate-iso-a-7cb961@ai-tenant-e2e-shared-a-aefe3e/rate-test-model-aefe3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aefe3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7cb961","namespace":"ai-tenant-e2e-shared-a-aefe3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a45abe42-8671-47eb-bdd6-fa750f854024","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d421c50-f986-45af-8ea5-767219d29999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d421c50-f986-45af-8ea5-767219d29999","method":"POST","path":"/ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26/v1/completions","host":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d421c50-f986-45af-8ea5-767219d29999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036161,"nanos":332025300},"http":{"id":"0d421c50-f986-45af-8ea5-767219d29999","method":"POST","headers":{":authority":"e2e-shared-b-b07c26.apps.0af9600a-71df-4bd2-bd27-f1bcc8328895.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C1hsi4uDfm20m9dg_n4SsQFJcLsUofBSB6vK84s9d7Ov13dRdk5KKsrrTz0n"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C1hsi4uDfm20m9dg_n4SsQFJcLsUofBSB6vK84s9d7Ov13dRdk5KKsrrTz0n\"}"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"089a479a-9bea-4ac7-bf55-bb6eb381dbdc","keyName":"e2e-rate-b-7cb961","subscription":"e2e-rate-iso-b-7cb961","tenant":"e2e-shared-b-b07c26","userId":"089a479a-9bea-4ac7-bf55-bb6eb381dbdc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26\",\"requestedSubscription\":\"e2e-rate-iso-b-7cb961\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b07c26.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b07c26","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7cb961","namespace":"ai-tenant-e2e-shared-b-b07c26","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d421c50-f986-45af-8ea5-767219d29999","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7cb961"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d421c50-f986-45af-8ea5-767219d29999","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"089a479a-9bea-4ac7-bf55-bb6eb381dbdc","keyName":"e2e-rate-b-7cb961","selected_subscription":"e2e-rate-iso-b-7cb961","selected_subscription_key":"ai-tenant-e2e-shared-b-b07c26/e2e-rate-iso-b-7cb961@ai-tenant-e2e-shared-b-b07c26/rate-test-model-b07c26","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b07c26","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7cb961","namespace":"ai-tenant-e2e-shared-b-b07c26","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d421c50-f986-45af-8ea5-767219d29999","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d421c50-f986-45af-8ea5-767219d29999","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0728f59e78f1250ff1c6f40f1fb04c2798b271cb86100fb530d15c6a3333a178"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540361e593bbdd05ddf7c125af764db9c9dcfd271d97d3e8f29295b3c0e594e9"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e80db8395ae7f908e9c3efe859bc0d447464bddcbd80c7c5a29f75bb81b1febb"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b6aab33f423e9b945de9133b6e39de65908b68902fc89a4aa342e48078ce48e"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42dd9d49f764cc32aeef476ba50bbe6e9591df70eebf74cbda2b234db5fe07df"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac3cbdbbdcd4264d4a761535a00dc66f3843781b13527e7d6228d7a873f5048"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49d693058f398acd00b4cf16705274bb156d8063b6639cdeca7eeeb646fc7a8d"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19010fca77228a9e99bc181a89166885012b15d8076fb577007f2406a74065f7"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3802ea86919863138c1f8678c33ae6b106297e10d3faa20d8c45007ce2ecf9bc"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71876a1da8d515c6bff2ad32ce8c27bc302e900bc88179ae1d852c73f8e82f4"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b888a52ad0219729a956631c8ee6977fba4ae980231818502a00a5019963366"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfef0c0662b68874e3c96837432fce8af956c7347655052a021bc59c55a899b0"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52d73438a849179c9f956896ce9e23b94d56daf6a6b3af612891107e88650653"}
{"level":"info","ts":"2026-07-02T23:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56700deeef3a4868ddeee8fccb5770994165f8cc9702661b30ec39b3535e566e"}
{"level":"info","ts":"2026-07-02T23:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf51fa6dd12c972ead9a8192be0d4aa2f2b3d5416e31456078cafd9614a1e3ff"}
{"level":"info","ts":"2026-07-02T23:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f591165fe6363d1bf0f9b89a65a8cf47e6f14ac870c02107fd836d2d6313e3b"}
{"level":"info","ts":"2026-07-02T23:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc87052e315f2dec90975bf7ca054291fdcb13737da173739fbb4f24ef52cf89"}
{"level":"info","ts":"2026-07-02T23:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7046bcf34fd5977da89df74822a910c85ab75aac3254daaf8e0496525fc47f7"}
{"level":"info","ts":"2026-07-02T23:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e86a2e7416a4ad19b40773db0723c5a5598836a099e8d7fa4ca8533ef0723da"}
{"level":"info","ts":"2026-07-02T23:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c02f89c7161e2da38b4780abb79b3f64ee41993ae699b881e992aeadb0a952d"}